PT-2021-5827
CVE-2021-21779
·
Published
2021-02-12
·
Updated
2026-10-31
Description by
CVSS 3.1
8.8
HighMetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
WebKitGTK version 2.30.4
Description
A use-after-free vulnerability exists in the way Webkit’s GraphicsContext handles certain events. This can lead to a potential information leak and further memory corruption when a victim visits a specially crafted web page. The vulnerability can be exploited by a remote attacker to access confidential data, compromise data integrity, and cause a denial of service.
Recommendations
For WebKitGTK version 2.30.4, update to a version with improved memory management to address the use-after-free issue. As a temporary workaround, consider restricting access to potentially malicious web pages to minimize the risk of exploitation.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾