ALSA-2025:22790 — Important: webkit2gtk3 security update

Summary

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

* webkit: WebKitGTK / WPE WebKit: Out-of-bounds read and integer underflow vulnerability leading to DoS (CVE-2025-13502)
* webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2023-43000)
* webkitgtk: A website may exfiltrate image data cross-origin (CVE-2025-43392)
* webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2025-43419)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43425)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43427)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43429)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43430)
* webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2025-43431)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43432)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43434)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43440)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43443)
* webkitgtk: A malicious website may exfiltrate data cross-origin (CVE-2025-43480)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43421)
* webkit: WebKitGTK: Remote user-assisted information disclosure via file drag-and-drop (CVE-2025-13947)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43458)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-66287)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 4

Release	Package	Fixed in
AlmaLinux · 9	webkit2gtk3	2.50.3-1.el9_7
AlmaLinux · 9	webkit2gtk3-devel	2.50.3-1.el9_7
AlmaLinux · 9	webkit2gtk3-jsc	2.50.3-1.el9_7
AlmaLinux · 9	webkit2gtk3-jsc-devel	2.50.3-1.el9_7

Vulnerabilities 18

High 8.8

CVE-2023-43000 Exploited

A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16…

Apple macOS iOS and iPadOS Safari macOS iOS Browsers Debian Ubuntu

Nov 5, 2025
KEV Mar 5, 2026
High 8.8

CVE-2025-43419

The issue was addressed with improved memory handling. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Ta…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Nov 4, 2025
High 8.8

CVE-2025-43431

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Nov 4, 2025
High 8.8

CVE-2025-66287

Webkitgtk: processing maliciously crafted web content may lead to an unexpected process crash

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.

Red Hat The WebKitGTK Team Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Linux Debian Ubuntu

Dec 4, 2025
High 8.1

CVE-2025-43480

The issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Nov 4, 2025
High 7.5

CVE-2025-13502

Webkit: webkitgtk / wpe webkit: out-of-bounds read and integer underflow vulnerability leading to dos

A flaw was found in WebKitGTK and WPE WebKit. This vulnerability allows an out-of-bounds read and integer underflow, leading to a UIProcess crash (DoS) via a crafted payload to the GLib remote inspector server.

Red Hat The WebKitGTK Team Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Linux Debian Ubuntu

Nov 25, 2025
High 7.4

CVE-2025-13947 Public exploit

Webkit: webkitgtk: remote user-assisted information disclosure via file drag-and-drop

A flaw was found in WebKitGTK. This vulnerability allows remote, user-assisted information disclosure that can reveal any file the user is permitted to read via abusing the file drag-and-drop mechanism where WebKitGTK does not verify that drag operations orig…

Red Hat The WebKitGTK Team Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Linux Debian Ubuntu

Dec 3, 2025
Medium 6.5

CVE-2025-43440

This issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Taho…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Nov 4, 2025
Medium 4.3

CVE-2025-43392

The issue was addressed with improved handling of caches. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Nov 4, 2025
Medium 4.3

CVE-2025-43421

Multiple issues were addressed by disabling array allocation sinking. This issue is fixed in Safari 26.1, iOS 26.1 and …

Apple macOS iOS and iPadOS visionOS macOS iOS Browsers Debian Ubuntu

Nov 4, 2025
Medium 4.3

CVE-2025-43425

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, ma…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Nov 4, 2025
Medium 4.3

CVE-2025-43427

This issue was addressed through improved state management. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.…

Apple macOS iOS and iPadOS tvOS macOS iOS Browsers Debian Ubuntu

Nov 4, 2025
Medium 4.3

CVE-2025-43429

A buffer overflow was addressed with improved bounds checking. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadO…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Nov 4, 2025
Medium 4.3

CVE-2025-43430

This issue was addressed through improved state management. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Nov 4, 2025
Medium 4.3

CVE-2025-43432

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.1, iOS 26.1 and …

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Nov 4, 2025
Medium 4.3

CVE-2025-43434

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.1, iOS 18.7.2 an…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Nov 4, 2025
Medium 4.3

CVE-2025-43443

This issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Nov 4, 2025
Medium 4.3

CVE-2025-43458

This issue was addressed through improved state management. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 1…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Nov 4, 2025

References

report
https://access.redhat.com/security/cve/CVE-2023-43000
report
https://access.redhat.com/security/cve/CVE-2025-13502
report
https://access.redhat.com/security/cve/CVE-2025-13947
report
https://access.redhat.com/security/cve/CVE-2025-43392
report
https://access.redhat.com/security/cve/CVE-2025-43419
report
https://access.redhat.com/security/cve/CVE-2025-43421
report
https://access.redhat.com/security/cve/CVE-2025-43425
report
https://access.redhat.com/security/cve/CVE-2025-43427
report
https://access.redhat.com/security/cve/CVE-2025-43429
report
https://access.redhat.com/security/cve/CVE-2025-43430
report
https://access.redhat.com/security/cve/CVE-2025-43431
report
https://access.redhat.com/security/cve/CVE-2025-43432
report
https://access.redhat.com/security/cve/CVE-2025-43434
report
https://access.redhat.com/security/cve/CVE-2025-43440
report
https://access.redhat.com/security/cve/CVE-2025-43443
report
https://access.redhat.com/security/cve/CVE-2025-43458
report
https://access.redhat.com/security/cve/CVE-2025-43480
report
https://access.redhat.com/security/cve/CVE-2025-66287
report
https://bugzilla.redhat.com/2416300
report
https://bugzilla.redhat.com/2416324
report
https://bugzilla.redhat.com/2416325
report
https://bugzilla.redhat.com/2416326
report
https://bugzilla.redhat.com/2416327
report
https://bugzilla.redhat.com/2416329
report
https://bugzilla.redhat.com/2416330
report
https://bugzilla.redhat.com/2416331
report
https://bugzilla.redhat.com/2416332
report
https://bugzilla.redhat.com/2416334
report
https://bugzilla.redhat.com/2416335
report
https://bugzilla.redhat.com/2416336
report
https://bugzilla.redhat.com/2416337
report
https://bugzilla.redhat.com/2416338
report
https://bugzilla.redhat.com/2416355
report
https://bugzilla.redhat.com/2418576
report
https://bugzilla.redhat.com/2418855
report
https://bugzilla.redhat.com/2418857
advisory
https://errata.almalinux.org/9/ALSA-2025-22790.html

Important: webkit2gtk3 security update

Summary

Fixed packages 4

Vulnerabilities 18

A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16…

The issue was addressed with improved memory handling. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Ta…

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2…

Webkitgtk: processing maliciously crafted web content may lead to an unexpected process crash

The issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe…

Webkit: webkitgtk / wpe webkit: out-of-bounds read and integer underflow vulnerability leading to dos

Webkit: webkitgtk: remote user-assisted information disclosure via file drag-and-drop

This issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Taho…

The issue was addressed with improved handling of caches. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.…

Multiple issues were addressed by disabling array allocation sinking. This issue is fixed in Safari 26.1, iOS 26.1 and …

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, ma…

This issue was addressed through improved state management. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.…

A buffer overflow was addressed with improved bounds checking. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadO…

This issue was addressed through improved state management. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.…

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.1, iOS 26.1 and …

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.1, iOS 18.7.2 an…

This issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26…

This issue was addressed through improved state management. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 1…

References