CVE-2022-29536

In GNOME Epiphany before 41.4 and 42.x before 42.2, an HTML document can trigger a client buffer overflow (in ephy_string_shorten in the UI process) via a long…

published April 20, 2022

CVSS
—
EPSS
2%
Percentile
81.1
In the wild
Unconfirmed
What it is

In GNOME Epiphany before 41.4 and 42.x before 42.2, an HTML document can trigger a client buffer overflow (in ephy_string_shorten in the UI process) via a long page title. The issue occurs because the number of bytes for a UTF-8 ellipsis character is not properly considered.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02047 · 81.1th percentile
Published
2022-04-20T22:37Z
EPSS history
Timeline
  • 20 APR 22:37Z
    In GNOME Epiphany before 41.4 and 42.x before 42.2, an HTML document can trigger a client buffer overflow (in ephy_string_shorten in the UI process) via a long…
    cvelistv5