Apple WebKit Out-of-Bounds Read Vulnerability Allowing Memory Disclosure

A vulnerability in WebKit, the engine used by Safari and other Apple applications, allows for an out-of-bounds read that could lead to the disclosure of process memory. This issue was introduced by a logic error in the handling of media files, which could be exploited by processing a maliciously crafted file. The vulnerability is present in several Apple products, including iOS 26.1, iPadOS 26.1, Pages 15.1, and macOS Tahoe 26.1.

Impact

Exploitation of this vulnerability could result in unexpected application termination or unauthorized access to process memory, potentially leading to the disclosure of sensitive information.