{
  "cveId": "CVE-2019-8375",
  "url": "https://patchblox.com/security/cve/CVE-2019-8375",
  "summary": "CVE-2019-8375 is fixed in 7 products on 1 platform, first by gir1.2-javascriptcoregtk-4.0 2.24.1-0ubuntu0.18.04.1, released December 18, 2019. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "gir1.2-javascriptcoregtk-4.0: The UIProcess subsystem in WebKit, as used in WebKitGTK through 2.23.90 and WebKitGTK\u002B through 2.22.6 and other produ...",
  "description": "The UIProcess subsystem in WebKit, as used in WebKitGTK through 2.23.90 and WebKitGTK\u002B through 2.22.6 and other products, does not prevent the script dialog size from exceeding the web view size, which allows remote attackers to cause a denial of service (Buffer Overflow) or possibly have unspecified other impact, related to UIProcess/API/gtk/WebKitScriptDialogGtk.cpp, UIProcess/API/gtk/WebKitScriptDialogImpl.cpp, and UIProcess/API/gtk/WebKitWebViewGtk.cpp, as demonstrated by GNOME Web (aka Epiphany).",
  "published": "2019-02-23T16:00:00Z",
  "severity": "Medium",
  "epss": 0.15697,
  "epssPercentile": 0.96877,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "gir1.2-javascriptcoregtk-4.0",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.24.1-0ubuntu0.18.04.1",
      "fix": "gir1.2-javascriptcoregtk-4.0 2.24.1-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-gir1.2-javascriptcoregtk-4.0-2.24.1-0ubuntu0.18.04.1",
      "released": "2019-12-18T10:15:00Z"
    },
    {
      "platform": "linux",
      "product": "gir1.2-webkit2-4.0",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.24.1-0ubuntu0.18.04.1",
      "fix": "gir1.2-webkit2-4.0 2.24.1-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-gir1.2-webkit2-4.0-2.24.1-0ubuntu0.18.04.1",
      "released": "2019-12-18T10:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libjavascriptcoregtk-4.0-18",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.24.1-0ubuntu0.18.04.1",
      "fix": "libjavascriptcoregtk-4.0-18 2.24.1-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libjavascriptcoregtk-4.0-18-2.24.1-0ubuntu0.18.04.1",
      "released": "2019-12-18T10:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libjavascriptcoregtk-4.0-bin",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.24.1-0ubuntu0.18.04.1",
      "fix": "libjavascriptcoregtk-4.0-bin 2.24.1-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libjavascriptcoregtk-4.0-bin-2.24.1-0ubuntu0.18.04.1",
      "released": "2019-12-18T10:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libwebkit2gtk-4.0-37",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.24.1-0ubuntu0.18.04.1",
      "fix": "libwebkit2gtk-4.0-37 2.24.1-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libwebkit2gtk-4.0-37-2.24.1-0ubuntu0.18.04.1",
      "released": "2019-12-18T10:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libwebkit2gtk-4.0-37-gtk2",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.24.1-0ubuntu0.18.04.1",
      "fix": "libwebkit2gtk-4.0-37-gtk2 2.24.1-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libwebkit2gtk-4.0-37-gtk2-2.24.1-0ubuntu0.18.04.1",
      "released": "2019-12-18T10:15:00Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk-driver",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.24.1-0ubuntu0.18.04.1",
      "fix": "webkit2gtk-driver 2.24.1-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-webkit2gtk-driver-2.24.1-0ubuntu0.18.04.1",
      "released": "2019-12-18T10:15:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T18:46:35Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}