Beveiligingsadvies

CVE-2018-12293

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2018-06-19 21:00:00
Laatst bijgewerkt 2024-08-05 08:30:59
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

The getImageData function in the ImageBufferCairo class in WebCore/platform/graphics/cairo/ImageBufferCairo.cpp in WebKit, as used in WebKitGTK+ prior to version 2.20.3 and WPE WebKit prior to version 2.20.1, is vulnerable to a heap-based buffer overflow triggered by an integer overflow, which could be abused by crafted HTML content.