The getImageData function in the ImageBufferCairo class in WebCore/platform/graphics/cairo/ImageBufferCairo.cpp in WebKit, as used in WebKitGTK+ prior to version 2.20.3 and WPE WebKit prior to version 2.20.1, is vulnerable to a heap-based buffer overflow triggered by an integer overflow, which could be abused by crafted HTML content.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2018-06-19T21:00:00
Updated: 2024-08-05T08:30:59.600Z
Reserved: 2018-06-13T00:00:00
Link: CVE-2018-12293
Vulnrichment
No data.
NVD
Status : Modified
Published: 2018-06-19T21:29:00.957
Modified: 2024-11-21T03:44:54.833
Link: CVE-2018-12293
Redhat
No data.