CVE-2026-64715
Overview
Advisory: Apple Security Advisory
Impact:
Description: Processing maliciously crafted web content may lead to an unexpected process crash
Researchers: Hossein Lotfi (@hosselot) of TrendAI Zero Day Initiative
| Attribute | Value |
|---|---|
| CVE | CVE-2026-64715 |
| Bugzilla | 316347 |
| Component | JSC |
| Bug Class | UAF |
| Severity | medium |
| Commit | 1d5c10e2f9c8f313… |
| Advisory | Apple Advisory |
Root Cause Analysis
A use-after-free issue was addressed with improved memory management.
Files Changed
Source Files
Source/JavaScriptCore/b3/B3PureCSE.cppSource/JavaScriptCore/b3/B3PureCSE.hSource/JavaScriptCore/b3/B3ReduceStrength.cpp
Test Files
Source/JavaScriptCore/b3/testb3.hSource/JavaScriptCore/b3/testb3_1.cppSource/JavaScriptCore/b3/testb3_6.cpp