More information about this security flaw is available in the following bug: https://bugzilla.redhat.com/show_bug.cgi?id=2357913 Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
This CVE is fixed only on ARM architectures by https://github.com/WebKit/WebKit/commit/4c65775f049beec4fe0a50c1243dcfa634bf33e1. x86_64 is not vulnerable. x86 is not vulnerable when the SSE2 instruction set is enabled. Other architectures remain vulnerable. The fix for this CVE causes the build to fail on 32-bit ARM architectures. My intention is to leave this bug report open indefinitely because no cross-platform solution is available.
I have confirmed with the CNA that this CVE has been issued in error. I'm not sure why they have not retracted it yet. Closing.