← WebKit Silent-Fix Report — 2026-W23
b9f72089660743af40868166a591f2ce0469e760 AX: [WebAccessibilityObjectWrapper _collectAccessibilityElements:] needs a null check
severity low
class LogicError
confidence 0.55
Accessibility iOS
Primitive: Null deref in _collectAccessibilityElements on missing wrapper
Triage note: _collectAccessibilityElements added `if (!element) continue;` so a null wrapper/attachment/remote-frame element is not passed to [result.elements addObject:], preventing a null-object crash reachable from web-influenced AX tree structure.
Triage note: _collectAccessibilityElements added `if (!element) continue;` so a null wrapper/attachment/remote-frame element is not passed to [result.elements addObject:], preventing a null-object crash reachable from web-influenced AX tree structure.
Security-relevant, below the exploitable-grade bar for a full root-cause writeup. The triage verdict is above; the side-by-side patch is below.
Before / after
Loading diff…