Apple WebKit Out-of-Bounds Access Vulnerability Leading to Safari Crash

A vulnerability in WebKit, the engine used by Safari, allows for out-of-bounds access due to insufficient bounds checking. This issue can be triggered by processing maliciously crafted web content, leading to memory corruption and causing Safari to crash unexpectedly. The vulnerability is present in multiple Apple operating systems, including macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7, iPadOS 17.7.9, tvOS 18.6, watchOS 11.6, and visionOS 2.6.

Impact

Exploitation of this vulnerability causes a use-after-free condition, where the application attempts to use memory that has already been freed, leading to a crash. However, such vulnerabilities can often be exploited to execute arbitrary code under certain conditions.