VDB

CVE-2018-11646

CVE-2018-11646 PUBLISHED

webkitFaviconDatabaseSetIconForPageURL and webkitFaviconDatabaseSetIconURLForPageURL in UIProcess/API/glib/WebKitFaviconDatabase.cpp in WebKit, as used in WebKitGTK+ through 2.21.3, mishandle an unset pageURL, leading to an application crash.

EPSS 75.35% · 98.9th percentile

Risk Scores

EPSS Score
75.35%
98.9th percentile

Affected Products

VendorProductVersions
Ubuntu:22.04:LTSqtwebkit-opensource-src0, 5.212.0~alpha4-15ubuntu1, 5.212.0~alpha4-14ubuntu2
Ubuntu:16.04:LTSwebkit2gtk*, 2.10.3+dfsg1-1, 2.10.4+dfsg1-1
Ubuntu:20.04:LTSqtwebkit-opensource-src5.212.0~alpha4-1ubuntu2, 5.212.0~alpha4-1, *
Ubuntu:16.04:LTSqtwebkit-source2.3.2-0ubuntu10, 2.3.2-0ubuntu11, 0
Ubuntu:24.04:LTSqtwebkit-opensource-src5.212.0~alpha4-33build1, 0, 5.212.0~alpha4-36
Ubuntu:16.04:LTSwebkitgtk2.4.9-2ubuntu2, 2.4.10-0ubuntu1, 0
Ubuntu:18.04:LTSwebkitgtk2.4.11-3ubuntu3, 2.4.11-3, 0
Ubuntu:16.04:LTSqtwebkit-opensource-src0, 5.5.1+dfsg-2ubuntu1, 5.4.2+dfsg-1ubuntu2.1
Ubuntu:18.04:LTSqtwebkit-source2.3.2-0ubuntu13, 0
Ubuntu:18.04:LTSqtwebkit-opensource-src5.212.0~alpha2-7ubuntu1, 5.212.0~alpha2-7build2, 5.212.0~alpha2-7

Exploit Intelligence

Timeline

  • Jun 1, 2018 CVE Published
  • Jun 6, 2018 PoC Published
  • Jun 11, 2018 PoC Published
  • Apr 14, 2021 EPSS Score
  • Aug 24, 2021 EPSS Score
  • Dec 27, 2021 EPSS Score
  • Feb 4, 2022 EPSS Score
  • May 2, 2022 EPSS Score
  • Sep 5, 2022 EPSS Score
  • Jan 8, 2023 EPSS Score
  • Mar 11, 2023 EPSS Score
  • Apr 7, 2023 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›