EIP-2026-103715

This HTML-based PoC exploits a race condition in WebKitGTK+ where the compositor thread and main thread concurrently modify a FilterOperation object's reference count, leading to a use-after-free (UAF) condition. The exploit uses CSS animations and rapid DOM manipulation to trigger the vulnerability.