← WebKit Silent-Fix Report — 2026-W25
5c3bc51f9e FontCache::purgeInactiveFontData: clear shaped text caches when purging fonts
severity low
class UAF
confidence 0.45
WebCore graphics FontCache
Primitive: stale font reference in shaped-text cache
Triage note: Purging fonts without clearing shaped-text caches could leave dangling font references, a possible lifetime bug.
Triage note: Purging fonts without clearing shaped-text caches could leave dangling font references, a possible lifetime bug.
Security-relevant, below the exploitable-grade bar for a full root-cause writeup. The triage verdict is above; the side-by-side patch is below.
Before / after
Loading diff…