EIP-2026-103715
PRE-CVEWebKitGTK+ - 'ThreadedCompositor' Race Condition
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-103715. PoCs published by Google Security Research.
AI-analyzed exploit summary This HTML-based PoC exploits a race condition in WebKitGTK+ where the compositor thread and main thread concurrently modify a FilterOperation object's reference count, leading to a use-after-free (UAF) condition. The exploit uses CSS animations and rapid DOM manipulation to trigger the vulnerability.
Description
WebKitGTK+ - 'ThreadedCompositor' Race Condition
Exploits (1)
This HTML-based PoC exploits a race condition in WebKitGTK+ where the compositor thread and main thread concurrently modify a FilterOperation object's reference count, leading to a use-after-free (UAF) condition. The exploit uses CSS animations and rapid DOM manipulation to trigger the vulnerability.