CVE-2018-12911

Name of the Vulnerable Software and Affected Versions WebKitGTK+ version 2.20.3

Description The issue is related to an off-by-one error that results in an out-of-bounds write. This error is located in the get simple globs functions within the files ThirdParty/xdgmime/src/xdgmimecache.c and ThirdParty/xdgmime/src/xdgmimeglob.c.

Recommendations For WebKitGTK+ version 2.20.3, consider applying a patch to fix the off-by-one error in the get simple globs functions as a permanent solution. As a temporary workaround, restrict access to the get simple globs functions in the affected files until a patch is available.