← WebKit Silent-Fix Report — 2026-W22
33448fd684 SVGFontFace: Avoid unchecked call arguments
severity low
class UAF
confidence 0.55
WebCore SVG (SVGFontFace)
Primitive: lifetime hardening of unchecked/uncounted call arguments
Triage note: SaferCPP lifetime hardening converting raw references to protected refs, defends against UAF.
Triage note: SaferCPP lifetime hardening converting raw references to protected refs, defends against UAF.
Security-relevant, below the exploitable-grade bar for a full root-cause writeup. The triage verdict is above; the side-by-side patch is below.
Before / after
Loading diff…