Apple WebKit Buffer Overflow Vulnerability Leading to Process Crash

A buffer overflow vulnerability has been identified in WebKit, the engine used by Safari and other Apple applications, in several operating systems including iOS, iPadOS, tvOS, watchOS, and visionOS, all version 26.1. This vulnerability allows maliciously crafted web content to cause an unexpected process crash. The issue was addressed with improved bounds checking.

Impact

Exploitation of this vulnerability leads to a process crash, causing a denial of service condition.

Remediation

Users can update to Safari 26.1, or the respective 26.1 version of their operating system, to address this vulnerability.