Skip to content

webkit2gtk: use-after-free may lead to arbitrary code execution via crafted web content (CVE-2020-13558)

  • Processing maliciously crafted web content may lead to arbitrary code execution.
  • A use after free issue in the AudioSourceProviderGStreamer class was addressed with improved memory management.
  • Versions affected: WebKitGTK before 2.30.5 and WPE WebKit before 2.30.5.

Reference:

https://webkitgtk.org/security/WSA-2021-0001.html

Affected branches:

  • master
  • 3.13-stable
Edited by Rasmus Thomsen
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information