CVE-2018-12293 The getImageData function in the ImageBufferCairo class in WebCore/platform/graphics/cairo/ImageBufferCairo.cpp in WebKit, as used in WebKitGTK+ prior to version 2.20.3 and WPE WebKit prior to version...
HighCVSS 8.8
EPSS 10.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The getImageData function in the ImageBufferCairo class in WebCore/platform/graphics/cairo/ImageBufferCairo.cpp in WebKit, as used in WebKitGTK+ prior to version 2.20.3 and WPE WebKit prior to version 2.20.1, is vulnerable to a heap-based buffer overflow triggered by an integer overflow, which could be abused by crafted HTML content.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/webkit2gtk(Debian:12) | < 2.20.3-1 | 2.20.3-1 |
| debian/webkit2gtk(Debian:13) | < 2.20.3-1 | 2.20.3-1 |
| debian/webkit2gtk(Debian:14) | < 2.20.3-1 | 2.20.3-1 |
| Canonical Ubuntu Linux | = 16.04 | No fix listed |
| Canonical Ubuntu Linux | = 17.10 | No fix listed |
| Canonical Ubuntu Linux | = 18.04 | No fix listed |
| webkitgtk+ | < 2.20.3 | 2.20.3 |
| wpewebkit wpe webkit | < 2.20.1 | 2.20.1 |
| ubuntu/qtwebkit-opensource-src(Ubuntu:24.04) | All versions | No fix listed |
| ubuntu/qtwebkit-opensource-src(Ubuntu:22.04) | All versions | No fix listed |
References
- Debian Security Tracker CVE-2018-12293 vendor-advisory
- Ubuntu CVE tracker vendor-advisory
- USN-3687-1 vendor-advisory
- www.cve.org
- packetstormsecurity.com third-party-advisory vdb-entry
- [oss-security] 20180614 WebKitGTK+ and WPE WebKit Security Advisory WSA-2018-0005 mailing-list technical-description
- 20180614 WebKitGTK+ and WPE WebKit Security Advisory WSA-2018-0005 mailing-list
- bugs.webkit.org permissions-required vendor-advisory
- GLSA-201808-04 vendor-advisory
- trac.webkit.org patch third-party-advisory vendor-advisory
- USN-3687-1 third-party-advisory vendor-advisory
- 45205 exploit