CVE-2021-45481

In WebKitGTK before 2.32.4, there is incorrect memory allocation in WebCore::ImageBufferCairoImageSurfaceBackend::create, leading to a segmentation violation and application crash, a different vulnerability than CVE-2021-30889.

Score

CVSS 3.1 6.5 Medium

Status

Modified - cve@mitre.org

Published

2021-12-25

Last modified

2024-08-04

Weaknesses

CWE-401

Affected products

• Webkitgtk (Webkitgtk)

References

• http://www.openwall.com/lists/oss-security/2022/01/21/2
• https://github.com/ChijinZ/security_advisories/tree/master/webkitgtk-2.32.3