https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T11:42:49.922981+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-23881 cnvd-2018-23881 2026-10-03T11:42:49.928564+00:00 cnvd-2018-23881 https://cve.radiocsirt.org/vuln/euvd-2026-65715 EUVD-2026-65715 2026-10-03T11:42:49.928599+00:00 EUVD-2026-65715 https://cve.radiocsirt.org/vuln/fkie_cve-2018-12293 fkie_cve-2018-12293 2026-10-03T11:42:49.928614+00:00

The getImageData function in the ImageBufferCairo class in WebCore/platform/graphics/cairo/ImageBufferCairo.cpp in WebKit, as used in WebKitGTK+ prior to version 2.20.3 and WPE WebKit prior to version 2.20.1, is vulnerable to a heap-based buffer overflow triggered by an integer overflow, which could be abused by crafted HTML content.

 https://cve.radiocsirt.org/vuln/ghsa-g7g2-cvmj-5ppx GHSA-g7g2-cvmj-5ppx 2026-10-03T11:42:49.928661+00:00

The getImageData function in the ImageBufferCairo class in WebCore/platform/graphics/cairo/ImageBufferCairo.cpp in WebKit, as used in WebKitGTK+ prior to version 2.20.3 and WPE WebKit prior to version 2.20.1, is vulnerable to a heap-based buffer overflow triggered by an integer overflow, which could be abused by crafted HTML content.

 https://cve.radiocsirt.org/vuln/gsd-2018-12293 gsd-2018-12293 2026-10-03T11:42:49.928679+00:00 gsd-2018-12293 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-12293 UBUNTU-CVE-2018-12293 2026-10-03T11:42:49.928690+00:00

Affected: Ubuntu:16.04:LTS: webkit2gtk, Ubuntu:16.04:LTS: qtwebkit-opensource-src, Ubuntu:16.04:LTS: qtwebkit-source, Ubuntu:16.04:LTS: webkitgtk, Ubuntu:18.04:LTS: webkit2gtk, Ubuntu:18.04:LTS: qtwebkit-opensource-src, Ubuntu:18.04:LTS: qtwebkit-source, Ubuntu:18.04:LTS: webkitgtk, Ubuntu:20.04:LTS: qtwebkit-opensource-src, Ubuntu:22.04:LTS: qtwebkit-opensource-src and 1 more

The getImageData function in the ImageBufferCairo class in WebCore/platform/graphics/cairo/ImageBufferCairo.cpp in WebKit, as used in WebKitGTK+ prior to version 2.20.3 and WPE WebKit prior to version 2.20.1, is vulnerable to a heap-based buffer overflow triggered by an integer overflow, which could be abused by crafted HTML content.