alpine · CVE-2022-2294

Quick triage

View at Official alpine advisory, NVD, CVE.org · CVE detail

Freshness: no update timestamp found; verify against the upstream OS advisory manually.

Tracker summary

CVE-2022-2294: 5 source package rows (chromium, qt5-qtwebengine, webkit2gtk, webkit2gtk-5.0, webkit2gtk-6.0); 27 state rows across 7 repos (3.17-community, 3.18-community, 3.19-community, 3.20-community, 3.21-community, 3.22-community, edge-community); fixed 27, open 0.

Description:

Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.