CVE-2016-10226
JavaScriptCore in WebKit, as distributed in Safari Technology Preview Release 18, allows remote attackers to cause a denial of service (bitfield out-of-bounds read and application crash) via crafted JavaScript code that is mishandled in the operatorString function, related to assembler/MacroAssemblerARM64.h, assembler/MacroAssemblerX86Common.h, and wasm/WasmB3IRGenerator.cpp.
- Score
- CVSS 3.0 7.5 High
- Status
- Modified - cve@mitre.org
- Published
- 2017-04-03
- Last modified
- 2024-08-06
- Weaknesses
- CWE-125
Affected products
References
- https://bugs.webkit.org/show_bug.cgi?id=165091
- https://trac.webkit.org/changeset/209295
