CVE-2018-11646

HIGH 7.5CVE-2018-11646 · Published 01/06/2018 · updated 17/06/2026

Package	Affected versions	Patched versions
webkitgtk+ webkitgtk	`≤ 2.21.3`	No fix yet

Description

webkitFaviconDatabaseSetIconForPageURL and webkitFaviconDatabaseSetIconURLForPageURL in UIProcess/API/glib/WebKitFaviconDatabase.cpp in WebKit, as used in WebKitGTK+ through 2.21.3, mishandle an unset pageURL, leading to an application crash.

References

bugs.webkit.org/show_bug.cgi · Issue Tracking
bugzilla.gnome.org/show_bug.cgi · Exploit
security.gentoo.org/glsa/201808-04 · Third Party Advisory
exploit-db.com/exploits/44842 · Exploit
exploit-db.com/exploits/44876 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free