CVE-2018-12293

Name of the Vulnerable Software and Affected Versions WebKitGTK+ versions prior to 2.20.3 WPE WebKit versions prior to 2.20.1

Description The issue is related to a heap-based buffer overflow in the getImageData function within the ImageBufferCairo class. This overflow is triggered by an integer overflow and can be exploited by crafted HTML content.

Recommendations For WebKitGTK+ versions prior to 2.20.3, update to version 2.20.3 or later. For WPE WebKit versions prior to 2.20.1, update to version 2.20.1 or later.