Wind River Support Network

HomeDefectsLIN1019-6822

Acknowledged

LIN1019-6822 : Security Advisory - webkitgtk - CVE-2021-21806

Created: Jul 11, 2021 Updated: Oct 27, 2021

Found In Version: 10.19.45.1

Severity: Standard

Applicable for: Wind River Linux LTS 19

Component/s: Userspace

Description

An exploitable use-after-free vulnerability exists in WebKitGTK browser version 2.30.3 x64. A specially crafted HTML web page can cause a use-after-free condition, resulting in remote code execution. The victim needs to visit a malicious web site to trigger the vulnerability.

CREATE(Triage):(User=admin) [CVE-2021-21806|https://nvd.nist.gov/vuln/detail/CVE-2021-21806]