Security Advisory

CVE-2021-21775

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-07-07 21:18:18
Last updated 2024-08-03 18:23:29
Assigner talos
State PUBLISHED

Description

A use-after-free vulnerability exists in the way certain events are processed for ImageLoader objects of Webkit WebKitGTK 2.30.4. A specially crafted web page can lead to a potential information leak and further memory corruption. In order to trigger the vulnerability, a victim must be tricked into visiting a malicious webpage.