CVE-2018-12293

The getImageData function in the ImageBufferCairo class in WebCore/platform/graphics/cairo/ImageBufferCairo.cpp in WebKit, as used in WebKitGTK+ prior to…

published June 19, 2018

CVSS
—
EPSS
10%
Percentile
95.7
In the wild
Unconfirmed
What it is

The getImageData function in the ImageBufferCairo class in WebCore/platform/graphics/cairo/ImageBufferCairo.cpp in WebKit, as used in WebKitGTK+ prior to version 2.20.3 and WPE WebKit prior to version 2.20.1, is vulnerable to a heap-based buffer overflow triggered by an integer overflow, which could be abused by crafted HTML content.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.10394 · 95.7th percentile
Published
2018-06-19T21:00Z
EPSS history
Timeline
  • 19 JUN 21:00Z
    The getImageData function in the ImageBufferCairo class in WebCore/platform/graphics/cairo/ImageBufferCairo.cpp in WebKit, as used in WebKitGTK+ prior to…
    cvelistv5