Vulnerabilities > CVE-2022-30293 - Out-of-bounds Write vulnerability in multiple products
Attack vector
NETWORK Attack complexity
HIGH Privileges required
NONE Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
In WebKitGTK through 2.36.0 (and WPE WebKit), there is a heap-based buffer overflow in WebCore::TextureMapperLayer::setContentsLayer in WebCore/platform/graphics/texmap/TextureMapperLayer.cpp.
Vulnerable Configurations
Common Weakness Enumeration (CWE)
References
- http://www.openwall.com/lists/oss-security/2022/05/30/1
- http://www.openwall.com/lists/oss-security/2022/05/30/1
- https://bugs.webkit.org/show_bug.cgi?id=237187
- https://bugs.webkit.org/show_bug.cgi?id=237187
- https://github.com/ChijinZ/security_advisories/tree/master/webkitgtk-2.36.0
- https://github.com/ChijinZ/security_advisories/tree/master/webkitgtk-2.36.0
- https://security.gentoo.org/glsa/202208-39
- https://security.gentoo.org/glsa/202208-39
- https://www.debian.org/security/2022/dsa-5154
- https://www.debian.org/security/2022/dsa-5154
- https://www.debian.org/security/2022/dsa-5155
- https://www.debian.org/security/2022/dsa-5155