Summary
WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.
Security Fix(es):
* webkitgtk: webkitgtk: Use-after-free due to improper memory management (CVE-2025-43529)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43501)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43531)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43535)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43536)
* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43541)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | webkit2gtk3 | 2.50.4-1.el8_10 |
| AlmaLinux · 8 | webkit2gtk3-devel | 2.50.4-1.el8_10 |
| AlmaLinux · 8 | webkit2gtk3-jsc | 2.50.4-1.el8_10 |
| AlmaLinux · 8 | webkit2gtk3-jsc-devel | 2.50.4-1.el8_10 |
Vulnerabilities 7
-
High 8.8
Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perfo…
KEV Dec 12, 2025 -
High 8.8
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.3 an…
KEV Dec 15, 2025 -
Medium 4.3
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and…
-
Medium 4.3
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3…
-
Medium 4.3
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.3 an…
-
Medium 4.3
A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and i…
-
Low 3.1
A race condition was addressed with improved state handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS …
References
-
report
https://access.redhat.com/security/cve/CVE-2025-43501
-
report
https://access.redhat.com/security/cve/CVE-2025-43529
-
report
https://access.redhat.com/security/cve/CVE-2025-43531
-
report
https://access.redhat.com/security/cve/CVE-2025-43535
-
report
https://access.redhat.com/security/cve/CVE-2025-43536
-
report
https://access.redhat.com/security/cve/CVE-2025-43541
-
report
https://bugzilla.redhat.com/2423166
-
report
https://bugzilla.redhat.com/2423185
-
report
https://bugzilla.redhat.com/2423187
-
report
https://bugzilla.redhat.com/2423188
-
report
https://bugzilla.redhat.com/2423190
-
report
https://bugzilla.redhat.com/2423191
-
advisory
https://errata.almalinux.org/8/ALSA-2025-23663.html
-
report
https://www.redhat.com/security/data/cve/CVE-2025-14174.html