CVE-2021-45481: WebKitGTK

Medium severity, CVSS 6.5. EPSS: 1.4% chance of exploitation in the next 30 days.

In WebKitGTK before 2.32.4, there is incorrect memory allocation in WebCore::ImageBufferCairoImageSurfaceBackend::create, leading to a segmentation violation and application crash, a different vulnerability than CVE-2021-30889.

Affected products

• WebKitGTK WebKitGTK: before 2.32.4 (fixed in 2.32.4)

Published 2021-12-25. Last modified 2026-06-17.