« List of all CVEs

CVE-2020-13558

Published: 3/3/2021 Last updated: 8/4/2024 Reserved: 5/26/2020

A code execution vulnerability exists in the AudioSourceProviderGStreamer functionality of Webkit WebKitGTK 2.30.1. A specially crafted web page can lead to a use after free.

CNA assigner: talos (b86d76f8-0f8a-4a96-a78d-d8abfc7fc29b) Requested by: n/a

Metrics

Version Score Severity Vector String
3.0 8.8 High CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Opam packages affected (1)

javascriptcore

Products affected (1)

Product Vendor Version
Webkit n/a 12.6(2)_ET01

References (4)