← WebKit Silent-Fix Report — 2026-W22
5db4d93144 SpeechRecognition ASSERT Instead of MESSAGE_CHECK for Duplicate Client
severity low
class Other
confidence 0.40
WebKit SpeechRecognitionServer IPC
Primitive: compromised web process sends duplicate client id
Triage note: Turns an IPC-triggerable duplicate-client condition into a validated MESSAGE_CHECK, an IPC-hardening fix.
Triage note: Turns an IPC-triggerable duplicate-client condition into a validated MESSAGE_CHECK, an IPC-hardening fix.
Security-relevant, below the exploitable-grade bar for a full root-cause writeup. The triage verdict is above; the side-by-side patch is below.
Before / after
Loading diff…