CVE-2021-45482 - webkitgtk: use-after-free in WebCore::ContainerNode::firstChild

MEDIUM

webkitgtk: use-after-free in WebCore::ContainerNode::firstChild

Published Dec 25, 2021

6.5

MEDIUM

CVSS 3.1

EPSS 1.43%

In WebKitGTK before 2.32.4, there is a use-after-free in WebCore::ContainerNode::firstChild, a different vulnerability than CVE-2021-30889.

Red Hat Enterprise Linux 7 Extended Lifecycle Support

webkitgtk4-0:2.48.3-2.el7_9

Fixed · RHSA-2025:10364
Red Hat Enterprise Linux 8

webkit2gtk3-0:2.34.6-1.el8

Fixed · RHSA-2022:1777
Red Hat Enterprise Linux 6

webkitgtk

Out of support scope
Red Hat Enterprise Linux 7

webkitgtk3

Out of support scope
Red Hat Enterprise Linux 9

webkit2gtk3

Not affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 7 Extended Lifecycle Support	webkitgtk4-0:2.48.3-2.el7_9	Fixed	RHSA-2025:10364
Red Hat Enterprise Linux 8	webkit2gtk3-0:2.34.6-1.el8	Fixed	RHSA-2022:1777
Red Hat Enterprise Linux 6	webkitgtk	Out of support scope	n/a
Red Hat Enterprise Linux 7	webkitgtk3	Out of support scope	n/a
Red Hat Enterprise Linux 9	webkit2gtk3	Not affected	n/a

No remediation recorded yet.

Weaknesses (1)

CWE-416

Use After Free

Link	Providers	Tags
http://www.openwall.com/lists/oss-security/2022/01/21/2		mailing-listx_refsource_MLISTMailing ListThird Party Advisory
https://access.redhat.com/security/cve/CVE-2021-45482		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2040329		Issue Tracking
https://github.com/ChijinZ/security_advisories/tree/master/webkitgtk-2.32.3		x_refsource_MISCExploitThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2021-45482
https://www.cve.org/CVERecord?id=CVE-2021-45482