Vulnerabilities > CVE-2020-13543 - Use After Free vulnerability in Webkitgtk 2.30.0

047910
CVSS 8.8 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
network
low complexity
webkitgtk
CWE-416
NVD
Published: 2020-12-03
Updated: 2024-11-21

Summary

A code execution vulnerability exists in the WebSocket functionality of Webkit WebKitGTK 2.30.0. A specially crafted web page can trigger a use-after-free vulnerability which can lead to remote code execution. An attacker can get a user to visit a webpage to trigger this vulnerability.

Vulnerable Configurations

Part Description Count
Application
Webkitgtk
1

Common Weakness Enumeration (CWE)

References