CVE-2010-4206: Fedoraproject Fedora

High severity, CVSS 8.8. EPSS: 2.5% chance of exploitation in the next 30 days.

Array index error in the FEBlend::apply function in WebCore/platform/graphics/filters/FEBlend.cpp in WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted SVG document, related to effects in the application of filters.

Affected products

• Fedoraproject Fedora: version 13 only
• Google Chrome: before 7.0.517.44 (fixed in 7.0.517.44)
• WebKitGTK WebKitGTK: before 1.2.6 (fixed in 1.2.6)

Published 2010-11-06. Last modified 2026-06-16.