In WebKitGTK through 2.36.0 (and WPE WebKit), there is a heap-based buffer overflow in WebCore::TextureMapperLayer::setContentsLayer in WebCore/platform/graphics/texmap/TextureMapperLayer.cpp. https://github.com/ChijinZ/security_advisories/tree/master/webkitgtk-2.36.0 https://bugs.webkit.org/show_bug.cgi?id=237187
Created gnucash tracking bugs for this issue: Affects: epel-all [bug 2082549] Created pywebkitgtk tracking bugs for this issue: Affects: epel-all [bug 2082550] Created webkit2gtk3 tracking bugs for this issue: Affects: fedora-all [bug 2082551]
*** Bug 2082544 has been marked as a duplicate of this bug. ***
This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2022:7704 https://access.redhat.com/errata/RHSA-2022:7704
This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2022:8054 https://access.redhat.com/errata/RHSA-2022:8054
This bug is now closed. Further updates for individual products will be reflected on the CVE page(s): https://access.redhat.com/security/cve/cve-2022-30293