From 759c2c4f9ac082d01c96d40cc623c4483289b2f3 Mon Sep 17 00:00:00 2001 From: Joseph Goydish II Date: Fri, 26 Dec 2025 16:04:02 -0500 Subject: [PATCH] Update README.md --- README.md | 33 +++++++++++++++++++++++++++++++-- 1 file changed, 31 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index 61a4c93..5a248f4 100644 --- a/README.md +++ b/README.md @@ -1,2 +1,31 @@ -# 0day-GigaCage-Webkit -Impact analysis and evidence for a zero-day integer overflow in WebKit’s Gigacage affecting iOS 26.2. Includes technical summary, PoC, crash logs, and recommendations for vendor triage and mitigation. For researchers and defenders coordinating disclosure. +# WebKit Gigacage iOS 26.2 Zero-Day Impact Analysis + +**Status:** Active Zero-Day Vulnerability + +## Overview + +This repository documents an active zero-day integer overflow vulnerability in WebKit’s Gigacage implementation, affecting iOS 26.2 and related platforms. The flaw enables out-of-bounds memory access and process termination, with elevated risk of remote code execution if Gigacage protections are bypassed. + +## Contents + +- **TECHNICAL_DISCLOSURE.md:** Full technical advisory, including proof-of-concept code examples and analysis +- **crash_logs/**: Crash logs from affected iOS 26.2 devices demonstrating reproducibility + +## Impact + +- **Affected devices:** iOS 26.2, potentially macOS Sequoia 15.x and WKWebView-based browsers +- **Current risk:** Persistent Denial of Service (DoS) +- **Potential risk:** Remote Code Execution (RCE) +- **Confirmed:** 100% reproducibility on iOS 26.2 + +## Purpose + +Accelerate vendor triage and support mitigations. Intended for use by security engineers, defenders, and Apple’s security response teams. + +### Disclosure + +See TECHNICAL_DISCLOSURE.md for PoC details, crash evidence, and remediation recommendations. + +--- + +*For authorized research and mitigation only. Unauthorized exploitation is prohibited.*