8.8
High
CVE-2023-39928 A use-after-free vulnerability exists in the MediaRecorder API of Webkit WebKitGTK 2.40.5
Description
A use-after-free vulnerability exists in the MediaRecorder API of Webkit WebKitGTK 2.40.5. A specially crafted web page can abuse this vulnerability to cause memory corruption and potentially arbitrary code execution. A user would need to to visit a malicious webpage to trigger this vulnerability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Webkit | Versions not published |
References
- talosintelligence.com talosintelligence.com
- webkitgtk.org webkitgtk.org
- www.debian.org www.debian.org
- lists.fedoraproject.org lists.fedoraproject.org
- security.gentoo.org security.gentoo.org
Timeline
- Published
- Last modified