webkitgtk: Processing a file may lead to a denial of service or potentially disclose memory contents
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | n/a | affected |
|
Configuration 1 [-]
|
| Package | CPE | Advisory | Released Date |
|---|---|---|---|
| Red Hat Enterprise Linux 7 Extended Lifecycle Support | |||
| webkitgtk4-0:2.48.3-2.el7_9 | cpe:/o:redhat:rhel_els:7 | RHSA-2025:10364 | 2025-07-07T00:00:00Z |
| Red Hat Enterprise Linux 8 | |||
| webkit2gtk3-0:2.42.5-1.el8 | cpe:/a:redhat:enterprise_linux:8 | RHSA-2024:2982 | 2024-05-22T00:00:00Z |
| Red Hat Enterprise Linux 9 | |||
| webkit2gtk3-0:2.42.5-1.el9 | cpe:/a:redhat:enterprise_linux:9 | RHSA-2024:2126 | 2024-04-30T00:00:00Z |
No data available yet.
| Source | ID | Title |
|---|---|---|
Debian DSA |
DSA-2939-1 | chromium-browser security update |
EUVD |
EUVD-2014-1819 | Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger removal of an SVGFontFaceElement object, related to core/svg/SVGFontFaceElement.cpp. |
No CVSS v4.0
No CVSS v3.0
This CVE is not in the KEV list.
Exploit prediction score: 1.7% (1.681% probability within 30 days)
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
epss
|
epss
|
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Redhat rhel Els
|
|
| CPEs | cpe:/o:redhat:rhel_els:7 | |
| Vendors & Products |
Redhat rhel Els
|
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|