CVE-2022-29536
EUVD-2022-3387220.04.2022, 23:15
In GNOME Epiphany before 41.4 and 42.x before 42.2, an HTML document can trigger a client buffer overflow (in ephy_string_shorten in the UI process) via a long page title. The issue occurs because the number of bytes for a UTF-8 ellipsis character is not properly considered.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| gnome | epiphany | 𝑥 < 41.4 |
| gnome | epiphany | 42.0 ≤ 𝑥 < 42.2 |
| debian | debian_linux | 10.0 |
| debian | debian_linux | 11.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References