CVE-2016-10226
HighSummary
JavaScriptCore in WebKit, as distributed in Safari Technology Preview Release 18, allows remote attackers to cause a denial of service via crafted JavaScript code mishandled in the operatorString function, leading to bitfield out-of-bounds read and application crash.
Risk Assessment
Attackers may exploit this vulnerability to disrupt application functionality, potentially leading to downtime and loss of service availability for users.
Recommendation
It is recommended to update to the latest version of Safari to mitigate this vulnerability and to monitor applications for unauthorized access attempts.
Other vulnerabilities in JavaScriptCore w WebKit
See all- CVE-2016-10222High
In JavaScriptCore in WebKit, included in Safari Technology Preview Release 18, there is a vulnerability that allows remote attackers to cause a denial of service through crafted JavaScript code. This issue involves 'type confusion' in the JSON.stringify function, leading to segmentation violation and application crash.
- CVE-2017-5949Critical
JavaScriptCore in WebKit, as distributed in Safari Technology Preview Release 22, allows remote attackers to cause a denial of service through heap-based out-of-bounds write, leading to application crash. The attack can be executed via crafted JavaScript code that triggers access to red-zone memory locations.
Original NVD description (English source)
JavaScriptCore in WebKit, as distributed in Safari Technology Preview Release 18, allows remote attackers to cause a denial of service (bitfield out-of-bounds read and application crash) via crafted JavaScript code that is mishandled in the operatorString function, related to assembler/MacroAssemblerARM64.h, assembler/MacroAssemblerX86Common.h, and wasm/WasmB3IRGenerator.cpp.