CVE-2026-65336

Overview

Advisory: Apple Security Advisory

Impact:

Description: Processing maliciously crafted web content may lead to an unexpected Safari crash

Researchers: Josef Korbel

Attribute Value
CVE CVE-2026-65336
Bugzilla 317349
Component JSC
Bug Class LogicError
Severity medium
Commit 5b76326e8fc95ec2…
Advisory Apple Advisory

Root Cause Analysis

This issue was addressed through improved state management.

Files Changed

Source Files

  • Source/JavaScriptCore/llint/InPlaceInterpreter64.asm
  • Source/JavaScriptCore/wasm/WasmIPIntGenerator.cpp
  • Source/JavaScriptCore/wasm/WasmIPIntGenerator.h

Test Files

  • JSTests/wasm/stress/br-on-cast-fail-overlong-leb128.js
  • JSTests/wasm/stress/br-on-cast-overlong-leb128.js