CVE-2018-12294

Name: CVE-2018-12294
Creator: NVD / NIST
Published: 2018-06-19T21:29:01.02+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 2.46%

Last modified Jun 17, 2026

CVE-2018-12294 is a vulnerability of currently unknown severity. WebCore/platform/graphics/texmap/TextureMapperLayer.cpp in WebKit, as used in WebKitGTK+ prior to version 2.20.2, is vulnerable to a use after free for a WebCore::TextureMapperLayer object.. EPSS estimates a 2.46% chance of exploitation in the next 30 days.

Description

WebCore/platform/graphics/texmap/TextureMapperLayer.cpp in WebKit, as used in WebKitGTK+ prior to version 2.20.2, is vulnerable to a use after free for a WebCore::TextureMapperLayer object.

Metrics

EPSS Probability

2.46%

82.4th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-416

Affected Software

Vendor	Product	Versions
Webkit	Webkitgtk\+	< 2.20.2

References

http://packetstormsecurity.com/files/148200/WebKitGTK-Data-Leak-Code-Execution.htmlThird Party Advisory, VDB Entry
http://www.openwall.com/lists/oss-security/2018/06/14/1Mailing List
http://www.securityfocus.com/archive/1/542087/100/0/threaded
https://bugs.webkit.org/show_bug.cgi?id=184729Permissions Required, Vendor Advisory
https://security.gentoo.org/glsa/201808-04
https://trac.webkit.org/changeset/231300/webkitVendor Advisory
http://packetstormsecurity.com/files/148200/WebKitGTK-Data-Leak-Code-Execution.htmlThird Party Advisory, VDB Entry
http://www.openwall.com/lists/oss-security/2018/06/14/1Mailing List
http://www.securityfocus.com/archive/1/542087/100/0/threaded
https://bugs.webkit.org/show_bug.cgi?id=184729Permissions Required, Vendor Advisory
https://security.gentoo.org/glsa/201808-04
https://trac.webkit.org/changeset/231300/webkitVendor Advisory

Timeline

Published: Jun 19, 2018
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2018-12294?

WebCore/platform/graphics/texmap/TextureMapperLayer.cpp in WebKit, as used in WebKitGTK+ prior to version 2.20.2, is vulnerable to a use after free for a WebCore::TextureMapperLayer object.

How severe is CVE-2018-12294?

Severity scoring for CVE-2018-12294 is pending analysis. The EPSS model estimates a 2.46% probability of exploitation in the next 30 days.

How do I fix CVE-2018-12294?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2018-12294?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST