CVE-2026-43734

Overview

Advisory: Apple Security Advisory

Impact:

Description: Processing maliciously crafted web content may lead to an unexpected process crash

Researchers: Jonathan Alush-Aben

Attribute Value
CVE CVE-2026-43734
Bugzilla 313693
Component WebCore
Bug Class UAF
Severity medium
Commit 5b76ce8531919008…
Advisory Apple Advisory

Root Cause Analysis

A use-after-free issue was addressed with improved memory management.

Files Changed

Source Files

  • Source/WebCore/Modules/mediasource/MediaSource.cpp
  • Source/WebCore/platform/graphics/MediaPlayer.cpp
  • Source/WebCore/platform/graphics/MediaPlayer.h