Launchpad.net

Launchpad Home
Code
Bugs
Blueprints
Translations
Answers

CVE 2022-30293

In WebKitGTK through 2.36.0 (and WPE WebKit), there is a heap-based buffer overflow in WebCore::TextureMapperLayer::setContentsLayer in WebCore/platform/graphics/texmap/TextureMapperLayer.cpp.

Related bugs and status

CVE-2022-30293 (Candidate) is related to these bugs:

Bug #1970779: Upgrade to 2.36.7 for Focal and Jammy

		In	Importance	Status
1970779	Upgrade to 2.36.7 for Focal and Jammy	wpewebkit (Ubuntu)	Medium	Incomplete
1970779	Upgrade to 2.36.7 for Focal and Jammy	wpewebkit (Ubuntu Jammy)	Undecided	Confirmed
1970779	Upgrade to 2.36.7 for Focal and Jammy	wpewebkit (Ubuntu Focal)	Undecided	Confirmed

Bug #1970783: Multiple vulnerabilities in Bionic

Summary				In	Importance	Status
	1970783	Multiple vulnerabilities in Bionic		webkit2gtk (Ubuntu)	Wishlist	Won't Fix

See the

CVE page on Mitre.org for more details.

References

MISC: https://bugs.webkit.or...
MISC: https://github.com/Chi...
MLIST: [oss-security] 2022053...
DEBIAN: DSA-5154
DEBIAN: DSA-5155
GENTOO: GLSA-202208-39