CVE-2018-11646: High severity webkitgtk+ vulnerability
webkitFaviconDatabaseSetIconForPageURL and webkitFaviconDatabaseSetIconURLForPageURL in UIProcess/API/glib/WebKitFaviconDatabase.cpp in WebKit, as used in WebKitGTK+ through 2.21.3, mishandle an unset pageURL, leading to an application crash.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2018-11646?
CVE-2018-11646 is classified as a high severity vulnerability due to its potential to cause application crashes.
How do I fix CVE-2018-11646?
To fix CVE-2018-11646, update to a version of WebKitGTK+ later than 2.21.3 where the vulnerability has been addressed.
What causes the application crash in CVE-2018-11646?
The application crash in CVE-2018-11646 is caused by mishandling an unset pageURL in specific WebKit functions.
Which versions of WebKitGTK+ are affected by CVE-2018-11646?
WebKitGTK+ versions up to and including 2.21.3 are affected by CVE-2018-11646.
Is CVE-2018-11646 a remotely exploitable vulnerability?
CVE-2018-11646 is not classified as a remotely exploitable vulnerability as it requires specific conditions to trigger the crash.