VULNERABILITY INTELLIGENCE

CVE-2017-1000121

CVSS score9.8 CRITICAL
EPSS probability1.20%
CISA KEVNot currently listed
Published2017-11-01
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

The UNIX IPC layer in WebKit, including WebKitGTK+ prior to 2.16.3, does not properly validate message size metadata, allowing a compromised secondary process to trigger an integer overflow and subsequent buffer overflow in the UI process. This vulnerability does not affect Apple products.

Weakness classification

  • nvd@nist.gov: CWE-190

Primary references