CVE-2022-30293

Name of the Vulnerable Software and Affected Versions WebKitGTK versions through 2.36.0 WPE WebKit versions through 2.36.0

Description The issue is related to a heap-based buffer overflow in the WebCore::TextureMapperLayer::setContentsLayer function, located in WebCore/platform/graphics/texmap/TextureMapperLayer.cpp, which is part of the WebKitGTK and WPE WebKit modules for rendering web pages. This can be exploited by a remote attacker to execute arbitrary code or cause a denial of service.

Recommendations For WebKitGTK versions through 2.36.0, update to a version later than 2.36.0 to resolve the issue. For WPE WebKit versions through 2.36.0, update to a version later than 2.36.0 to resolve the issue. As a temporary workaround, consider disabling the WebCore::TextureMapperLayer::setContentsLayer function until a patch is available.