The issue was addressed with improved memory handling. This issue is fixed in macOS Tahoe 26.3, iOS 18.7.5 and iPadOS 18.7.5, visionOS 26.3, iOS 26.3 and iPadOS 26.3, Safari 26.3. A remote attacker may be able to cause a denial-of-service.
| Vendor | Product | Versions |
|---|---|---|
| apple | safari | < 26.3, < 18.7.5, < 26.3, < 18.7.5, < 26.3, < 26.3, < 26.3 |
Downstream vendors/products affected by this vulnerability
| Vendor | Product | Source | Confidence |
|---|---|---|---|
| debian | debian linux | cert_advisory | 90% |
| open source | webkitgtk | cert_advisory | 90% |
| su | suse linux | cert_advisory | 90% |