CVE-2021-45483: 
NixOS vulnerability analysis and mitigation

CVE-2021-45483 is a use-after-free vulnerability discovered in WebKitGTK before version 2.32.4. The vulnerability specifically affects the WebCore::Frame::page component and is distinct from CVE-2021-30889. This security issue was reported on December 24, 2021, and was discovered by Chijin Zhou of ShuiMuYuLin Ltd and Tsinghua wingtecher lab (NVD, OSS Security).

The vulnerability is classified as a heap-use-after-free memory corruption issue that occurs in the WebCore::Frame::page component. It has been assigned a CVSS v3.1 Base Score of 6.5 (Medium) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H. The vulnerability is tracked under CWE-416 (Use After Free) (NVD).

When exploited, this vulnerability allows processing of maliciously crafted web content that may cause a memory corruption issue (heap-use-after-free) in WebCore::Frame::page. This can potentially lead to application crashes and possible arbitrary code execution (OSS Security).

The vulnerability has been fixed in WebKitGTK version 2.32.4 and later releases. Users and administrators are strongly recommended to update to the latest stable versions of WebKitGTK and WPE WebKit to ensure system security (OSS Security).