CVE-2019-8375

CVE-2019-8375 is a critical buffer overflow vulnerability in the UIProcess subsystem of WebKitGTK and WebKitGTK+, affecting versions through 2.23.90 and 2.22.6 respectively, including products like GNOME Web. This flaw allows remote attackers to trigger a denial of service or potentially achieve other unspecified impacts by manipulating script dialog sizes to exceed web view dimensions. With a CVSS score of 9.8, it is easily exploitable over the network with low complexity and no user interaction, leading to high confidentiality, integrity, and availability impacts. While there is no evidence of active exploitation in the wild or KEV listing, a proof-of-concept denial-of-service exploit is publicly available on ExploitDB, though it lacks broader community discussion or media coverage.