Related Vulnerabilities: CVE-2022-26717  

A flaw was found in webkitgtk. Due to improper input validation, the issue occurs, leading to a use-after-free vulnerability. This flaw allows an attacker with network access to pass specially crafted web content files, causing an application to halt, crash, or arbitrary code execution.

Description

A flaw was found in webkitgtk. Due to improper input validation, the issue occurs, leading to a use-after-free vulnerability. This flaw allows an attacker with network access to pass specially crafted web content files, causing an application to halt, crash, or arbitrary code execution.

Additional Information

  • Bugzilla 2092735: CVE-2022-26717 webkitgtk: Processing maliciously crafted web content may lead to use after free issue
  • CWE-416: Use After Free
  • FAQ: Frequently asked questions about CVE-2022-26717