Exploitation Summary
EIP tracks 1 public exploit for CVE-2018-12293. PoCs published by PeregrineX.
AI-analyzed exploit summary This exploit demonstrates a heap-based buffer overflow in WebKitGTK+ and WPE WebKit due to an integer overflow in the `getImageData()` function. The PoC triggers the vulnerability by creating a large canvas and calling `getImageData()` with dimensions that cause an overflow.
Description
The getImageData function in the ImageBufferCairo class in WebCore/platform/graphics/cairo/ImageBufferCairo.cpp in WebKit, as used in WebKitGTK+ prior to version 2.20.3 and WPE WebKit prior to version 2.20.1, is vulnerable to a heap-based buffer overflow triggered by an integer overflow, which could be abused by crafted HTML content.
Exploits (1)
This exploit demonstrates a heap-based buffer overflow in WebKitGTK+ and WPE WebKit due to an integer overflow in the `getImageData()` function. The PoC triggers the vulnerability by creating a large canvas and calling `getImageData()` with dimensions that cause an overflow.
References (8)
Scores
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H