Post #289 1.19K May 21, 2023, 20:48 UTC CVE-2023-28204 (Safari zero-day, may have been actively exploited) - commit e34edaaRegExpGlobalData::performMatch issue leading to OOB read https://github.com/WebKit/WebKit/commit/e34edaa74575ee13efcebdb7672b949a743ab32a GitHub [JSC] RegExpGlobalData::performMatch issue leading to OOB read · WebKit/WebKit@e34edaa https://bugs.webkit.org/show_bug.cgi?id=254930 rdar://107436732 Reviewed by Alexey Shvayka. Fixed two issues: 1) In YarrInterpreter.cpp::matchAssertionBOL() we were advancing the string position ...