CVE Database›Document archive›CVE-2019-8720

CVE-2019-8720

webkitgtk: Multiple memory corruption issues leading to arbitrary code execution

Loading…

Severity

Moderate

Red Hat Product Security

8.8

CVSS 3.1

Review impact separately from score.

Published · October 29, 2019

Updated · January 5, 2026

Description

A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code execution. Improved memory handling addresses the multiple memory corruption issues.

Statement

This flaw is rated as 'Moderate' as the WebKitGTK package is shipped as a dependency for the Gnome package. Red Hat Enterprise Linux does not ship any WebKitGTK-based web browser where this flaw would present a higher severity major threat.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

Red Hat has investigated whether possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.

CVSS / CWE

CVSS 3.1 · 8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer