CVE-2022-30293
Description
In WebKitGTK through 2.36.0 (and WPE WebKit), there is a heap-based buffer overflow in WebCore::TextureMapperLayer::setContentsLayer in WebCore/platform/graphics/texmap/TextureMapperLayer.cpp.
Risk Information
Base Score
7.5
MODERATE
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.186
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| (RHSA-2022:7704) webkit2gtk3 security and bug fix update glib2-2.56.4-159.el8.i686.rpm | Linux |
| (RHSA-2022:7704) webkit2gtk3 security and bug fix update glib2-2.56.4-159.el8.x86_64.rpm | Linux |
| (RHSA-2022:7704) webkit2gtk3 security and bug fix update glib2-debugsource-2.56.4-159.el8.i686.rpm | Linux |
| (RHSA-2022:7704) webkit2gtk3 security and bug fix update glib2-debugsource-2.56.4-159.el8.x86_64.rpm | Linux |
| (RHSA-2022:7704) webkit2gtk3 security and bug fix update glib2-devel-2.56.4-159.el8.i686.rpm | Linux |
| (RHSA-2022:7704) webkit2gtk3 security and bug fix update glib2-devel-2.56.4-159.el8.x86_64.rpm | Linux |
| (RHSA-2022:7704) webkit2gtk3 security and bug fix update glib2-fam-2.56.4-159.el8.x86_64.rpm | Linux |
| (RHSA-2022:7704) webkit2gtk3 security and bug fix update glib2-tests-2.56.4-159.el8.x86_64.rpm | Linux |
| (RHSA-2022:7704) webkit2gtk3 security and bug fix update webkit2gtk3-2.36.7-1.el8.i686.rpm | Linux |
| (RHSA-2022:7704) webkit2gtk3 security and bug fix update webkit2gtk3-2.36.7-1.el8.x86_64.rpm | Linux |
| (RHSA-2022:7704) webkit2gtk3 security and bug fix update webkit2gtk3-debugsource-2.36.7-1.el8.i686.rpm | Linux |
| (RHSA-2022:7704) webkit2gtk3 security and bug fix update webkit2gtk3-debugsource-2.36.7-1.el8.x86_64.rpm | Linux |
| (RHSA-2022:7704) webkit2gtk3 security and bug fix update webkit2gtk3-devel-2.36.7-1.el8.i686.rpm | Linux |
| (RHSA-2022:7704) webkit2gtk3 security and bug fix update webkit2gtk3-devel-2.36.7-1.el8.x86_64.rpm | Linux |
| (RHSA-2022:7704) webkit2gtk3 security and bug fix update webkit2gtk3-jsc-2.36.7-1.el8.i686.rpm | Linux |
| (RHSA-2022:7704) webkit2gtk3 security and bug fix update webkit2gtk3-jsc-2.36.7-1.el8.x86_64.rpm | Linux |
| (RHSA-2022:7704) webkit2gtk3 security and bug fix update webkit2gtk3-jsc-devel-2.36.7-1.el8.i686.rpm | Linux |
| (RHSA-2022:7704) webkit2gtk3 security and bug fix update webkit2gtk3-jsc-devel-2.36.7-1.el8.x86_64.rpm | Linux |
| (RHSA-2022:7704)Moderate: security and bug fix update glib2-debuginfo-2.56.4-159.el8.i686.rpm | Linux |
| (RHSA-2022:7704)Moderate: security and bug fix update glib2-debuginfo-2.56.4-159.el8.x86_64.rpm | Linux |
| (RHSA-2022:7704)Moderate: security and bug fix update glib2-devel-debuginfo-2.56.4-159.el8.i686.rpm | Linux |
| (RHSA-2022:7704)Moderate: security and bug fix update glib2-devel-debuginfo-2.56.4-159.el8.x86_64.rpm | Linux |
| (RHSA-2022:7704)Moderate: security and bug fix update glib2-fam-debuginfo-2.56.4-159.el8.i686.rpm | Linux |
| (RHSA-2022:7704)Moderate: security and bug fix update glib2-fam-debuginfo-2.56.4-159.el8.x86_64.rpm | Linux |
| (RHSA-2022:7704)Moderate: security and bug fix update glib2-tests-debuginfo-2.56.4-159.el8.i686.rpm | Linux |
| (RHSA-2022:7704)Moderate: security and bug fix update glib2-tests-debuginfo-2.56.4-159.el8.x86_64.rpm | Linux |
| (RHSA-2022:7704)Moderate: security and bug fix update webkit2gtk3-debuginfo-2.36.7-1.el8.i686.rpm | Linux |
| (RHSA-2022:7704)Moderate: security and bug fix update webkit2gtk3-debuginfo-2.36.7-1.el8.x86_64.rpm | Linux |
| (RHSA-2022:7704)Moderate: security and bug fix update webkit2gtk3-devel-debuginfo-2.36.7-1.el8.i686.rpm | Linux |
| (RHSA-2022:7704)Moderate: security and bug fix update webkit2gtk3-devel-debuginfo-2.36.7-1.el8.x86_64.rpm | Linux |
| (RHSA-2022:7704)Moderate: security and bug fix update webkit2gtk3-jsc-debuginfo-2.36.7-1.el8.i686.rpm | Linux |
| (RHSA-2022:7704)Moderate: security and bug fix update webkit2gtk3-jsc-debuginfo-2.36.7-1.el8.x86_64.rpm | Linux |
| (RHSA-2022:7704)Moderate: security and bug fix update webkit2gtk3-jsc-devel-debuginfo-2.36.7-1.el8.i686.rpm | Linux |
| (RHSA-2022:7704)Moderate: security and bug fix update webkit2gtk3-jsc-devel-debuginfo-2.36.7-1.el8.x86_64.rpm | Linux |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234