← WebKit — 2026-W39
e594530ffc4e33eb0871a0a16e49ac89e8b2fe5b [Site Isolation] Let a SerializedImageBuffer cross a process boundary, so ImageBitmap can be transferred to a cross-site iframe
not a security fix
confidence 0.1
signal score 13.81
Source/WebCore/html
Classified as not security-relevant.
Triage note: Feature introduction: new ImageBufferTransferIdentifier.h, ImageBufferTransferHandle, GPUProcess deposit/take/authorize machinery, new IPC messages and SerializedScriptValue sink/transfer plumbing to let ImageBitmaps cross a process boundary. No bug fixed; pure new functionality.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Triage note: Feature introduction: new ImageBufferTransferIdentifier.h, ImageBufferTransferHandle, GPUProcess deposit/take/authorize machinery, new IPC messages and SerializedScriptValue sink/transfer plumbing to let ImageBitmaps cross a process boundary. No bug fixed; pure new functionality.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Structural signals: smartptr_member_added (+6.47), null_guard (+2.59), uaf_lifetime (+4.75), area:Source/WebCore/html (+2.0), large_churn (-2.0)
Before / after
Loading diff…
On This Page