← WebKit Silent-Fix Report — 2026-W25
8be326aece anchor()/anchor-size() crash on a function-form zero fallback
severity low
class Other
confidence 0.40
WebCore CSS calc/anchor
Primitive: web-reachable parser crash
Triage note: A crash reachable from CSS content (DoS); low severity and unclear it is memory-unsafe from the truncated diff.
Triage note: A crash reachable from CSS content (DoS); low severity and unclear it is memory-unsafe from the truncated diff.
Security-relevant, below the exploitable-grade bar for a full root-cause writeup. The triage verdict is above; the side-by-side patch is below.
Before / after
Loading diff…