CVE-2024-23213
Overview
Advisory: Apple Security Advisory
Impact:
Description: Processing web content may lead to arbitrary code execution
Researchers: Wangtaiyu of Zhongfu info
| Attribute | Value |
|---|---|
| CVE | CVE-2024-23213 |
| Bugzilla | 266619 |
| Component | WebKit |
| Bug Class | LogicError |
| Severity | critical |
| Commit | 8b7b2179aa726973… |
| Advisory | Apple Advisory |
Root Cause Analysis
The issue was addressed with improved memory handling.
Files Changed
Source Files
Source/WebKit/CMakeLists.txt
Patch Preview
diff --git a/Source/WebKit/CMakeLists.txt b/Source/WebKit/CMakeLists.txt
index 3b782a4b3d6f..bd39f0753235 100644
--- a/Source/WebKit/CMakeLists.txt
+++ b/Source/WebKit/CMakeLists.txt
@@ -40,6 +40,7 @@ set(WebKit_PRIVATE_INCLUDE_DIRECTORIES
"${WEBKIT_DIR}/Shared/CoreIPCSupport"
"${WEBKIT_DIR}/Shared/Databases"
"${WEBKIT_DIR}/Shared/Databases/IndexedDB"
+ "${WEBKIT_DIR}/Shared/Extensions"
"${WEBKIT_DIR}/Shared/FileAPI"
"${WEBKIT_DIR}/Shared/Gamepad"
"${WEBKIT_DIR}/Shared/Notifications"