← WebKit Silent-Fix Report — 2026-W21
57e44bb6ce (313296@main) ASSERTION FAILED: m_samples.decodeOrder().findSampleWithDecodeKey
severity medium
class LogicError
confidence 0.45
WebM media source
Primitive: duplicate (DTS,PTS) sample-map key collision
Triage note: Prevents an invariant violation in the media sample map from (attacker-influenceable) duplicate keys, a plausible corruption source.
Triage note: Prevents an invariant violation in the media sample map from (attacker-influenceable) duplicate keys, a plausible corruption source.
Security-relevant, below the exploitable-grade bar for a full root-cause writeup. The triage verdict is above; the side-by-side patch is below.
Before / after
Loading diff…