CVE-2022-30293

Description

In WebKitGTK through 2.36.0 (and WPE WebKit), there is a heap-based buffer overflow in WebCore::TextureMapperLayer::setContentsLayer in WebCore/platform/graphics/texmap/TextureMapperLayer.cpp.

Risk Information

Base Score
7.5
MODERATE
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.186

Associated Vulnerability

VulnerabilityOS Platform
(RHSA-2022:7704) webkit2gtk3 security and bug fix update glib2-2.56.4-159.el8.i686.rpmLinux
(RHSA-2022:7704) webkit2gtk3 security and bug fix update glib2-2.56.4-159.el8.x86_64.rpmLinux
(RHSA-2022:7704) webkit2gtk3 security and bug fix update glib2-debugsource-2.56.4-159.el8.i686.rpmLinux
(RHSA-2022:7704) webkit2gtk3 security and bug fix update glib2-debugsource-2.56.4-159.el8.x86_64.rpmLinux
(RHSA-2022:7704) webkit2gtk3 security and bug fix update glib2-devel-2.56.4-159.el8.i686.rpmLinux
(RHSA-2022:7704) webkit2gtk3 security and bug fix update glib2-devel-2.56.4-159.el8.x86_64.rpmLinux
(RHSA-2022:7704) webkit2gtk3 security and bug fix update glib2-fam-2.56.4-159.el8.x86_64.rpmLinux
(RHSA-2022:7704) webkit2gtk3 security and bug fix update glib2-tests-2.56.4-159.el8.x86_64.rpmLinux
(RHSA-2022:7704) webkit2gtk3 security and bug fix update webkit2gtk3-2.36.7-1.el8.i686.rpmLinux
(RHSA-2022:7704) webkit2gtk3 security and bug fix update webkit2gtk3-2.36.7-1.el8.x86_64.rpmLinux
(RHSA-2022:7704) webkit2gtk3 security and bug fix update webkit2gtk3-debugsource-2.36.7-1.el8.i686.rpmLinux
(RHSA-2022:7704) webkit2gtk3 security and bug fix update webkit2gtk3-debugsource-2.36.7-1.el8.x86_64.rpmLinux
(RHSA-2022:7704) webkit2gtk3 security and bug fix update webkit2gtk3-devel-2.36.7-1.el8.i686.rpmLinux
(RHSA-2022:7704) webkit2gtk3 security and bug fix update webkit2gtk3-devel-2.36.7-1.el8.x86_64.rpmLinux
(RHSA-2022:7704) webkit2gtk3 security and bug fix update webkit2gtk3-jsc-2.36.7-1.el8.i686.rpmLinux
(RHSA-2022:7704) webkit2gtk3 security and bug fix update webkit2gtk3-jsc-2.36.7-1.el8.x86_64.rpmLinux
(RHSA-2022:7704) webkit2gtk3 security and bug fix update webkit2gtk3-jsc-devel-2.36.7-1.el8.i686.rpmLinux
(RHSA-2022:7704) webkit2gtk3 security and bug fix update webkit2gtk3-jsc-devel-2.36.7-1.el8.x86_64.rpmLinux
(RHSA-2022:7704)Moderate: security and bug fix update glib2-debuginfo-2.56.4-159.el8.i686.rpmLinux
(RHSA-2022:7704)Moderate: security and bug fix update glib2-debuginfo-2.56.4-159.el8.x86_64.rpmLinux
(RHSA-2022:7704)Moderate: security and bug fix update glib2-devel-debuginfo-2.56.4-159.el8.i686.rpmLinux
(RHSA-2022:7704)Moderate: security and bug fix update glib2-devel-debuginfo-2.56.4-159.el8.x86_64.rpmLinux
(RHSA-2022:7704)Moderate: security and bug fix update glib2-fam-debuginfo-2.56.4-159.el8.i686.rpmLinux
(RHSA-2022:7704)Moderate: security and bug fix update glib2-fam-debuginfo-2.56.4-159.el8.x86_64.rpmLinux
(RHSA-2022:7704)Moderate: security and bug fix update glib2-tests-debuginfo-2.56.4-159.el8.i686.rpmLinux
(RHSA-2022:7704)Moderate: security and bug fix update glib2-tests-debuginfo-2.56.4-159.el8.x86_64.rpmLinux
(RHSA-2022:7704)Moderate: security and bug fix update webkit2gtk3-debuginfo-2.36.7-1.el8.i686.rpmLinux
(RHSA-2022:7704)Moderate: security and bug fix update webkit2gtk3-debuginfo-2.36.7-1.el8.x86_64.rpmLinux
(RHSA-2022:7704)Moderate: security and bug fix update webkit2gtk3-devel-debuginfo-2.36.7-1.el8.i686.rpmLinux
(RHSA-2022:7704)Moderate: security and bug fix update webkit2gtk3-devel-debuginfo-2.36.7-1.el8.x86_64.rpmLinux
(RHSA-2022:7704)Moderate: security and bug fix update webkit2gtk3-jsc-debuginfo-2.36.7-1.el8.i686.rpmLinux
(RHSA-2022:7704)Moderate: security and bug fix update webkit2gtk3-jsc-debuginfo-2.36.7-1.el8.x86_64.rpmLinux
(RHSA-2022:7704)Moderate: security and bug fix update webkit2gtk3-jsc-devel-debuginfo-2.36.7-1.el8.i686.rpmLinux
(RHSA-2022:7704)Moderate: security and bug fix update webkit2gtk3-jsc-devel-debuginfo-2.36.7-1.el8.x86_64.rpmLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234