← WebKit Silent-Fix Report — 2026-W23
6a4511bc5935267f5bc58b34616bc9e244ec66c4 Add missing null check in WebPage::exitImmersive
severity low
class LogicError
confidence 0.55
WebKit WebPage
Primitive: Null-pointer dereference in WebPage::exitImmersive
Triage note: exitImmersive() called localTopDocument->immersiveIfExists() without checking that localTopDocument() returned non-null; navigating an iframe to trigger immersive exit crashed the web process. Fix adds the null check before dereferencing. Web-reachable but only a DoS.
Triage note: exitImmersive() called localTopDocument->immersiveIfExists() without checking that localTopDocument() returned non-null; navigating an iframe to trigger immersive exit crashed the web process. Fix adds the null check before dereferencing. Web-reachable but only a DoS.
Security-relevant, below the exploitable-grade bar for a full root-cause writeup. The triage verdict is above; the side-by-side patch is below.
Before / after
Loading diff…