PT-2021-5827

CVE-2021-21779

·

Published

2021-02-12

·

Updated

2026-10-31

Description by

CVSS 3.1
8.8
High
MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions WebKitGTK version 2.30.4
Description A use-after-free vulnerability exists in the way Webkit’s GraphicsContext handles certain events. This can lead to a potential information leak and further memory corruption when a victim visits a specially crafted web page. The vulnerability can be exploited by a remote attacker to access confidential data, compromise data integrity, and cause a denial of service.
Recommendations For WebKitGTK version 2.30.4, update to a version with improved memory management to address the use-after-free issue. As a temporary workaround, consider restricting access to potentially malicious web pages to minimize the risk of exploitation.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
ALSA-2021:4381
ALT-PU-2021-1311
CESA-2021_4381
CLEANSTART-2024-BK79030
DSA-4945-1
MGASA-2021-0400
OPENSUSE-SU-2021:1101-1
OPENSUSE-SU-2021_1101-1
OPENSUSE-SU-2021:2598-1
OPENSUSE-SU-2021_2598-1
RHSA-2021:4381
RHSA-2021_4381
RHSA-2025:10364
RLSA-2021:4381
SUSE-SU-2021:2598-1
SUSE-SU-2021:2600-1
SUSE-SU-2021:2762-1
USN-5024-1
Found an issue in the description? Have something to add? Feel free to write us 👾