CVE-2017-1000121 | BDVDB-2026-92510 Detail

Description#

The UNIX IPC layer in WebKit, including WebKitGTK+ prior to 2.16.3, does not properly validate message size metadata, allowing a compromised secondary process to trigger an integer overflow and subsequent buffer overflow in the UI process. This vulnerability does not affect Apple products.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12017-11-01Record published in the CVE List.
2. Version 22024-11-14Most recent update recorded in the CVE List.