Summary
Several security issues were discovered in the WebKitGTK Web and JavaScript
engines. If a user were tricked into viewing a malicious website, a remote
attacker could exploit a variety of issues related to web browser security,
including cross-site scripting attacks, denial of service attacks, and
arbitrary code execution.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | webkit2gtk | 2.48.1-0ubuntu0.22.04.1 |
| Ubuntu · 24.04 LTS 24.04:LTS | webkit2gtk | 2.48.1-0ubuntu0.24.04.1 |
Vulnerabilities 7
-
Critical 9.8
The issue was addressed with improved memory handling. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, iP…
-
High 7.8
This issue was addressed with improved handling of floats. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5…
-
High 7.5
The issue was addressed with improved memory handling. This issue is fixed in Safari 17.6, iOS 17.6 and iPadOS 17.6, ma…
-
High 7.0
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 18.4, iOS 18.4 and i…
-
Medium 6.1
A permissions issue was addressed with additional restrictions. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS…
-
Medium 4.3
The issue was addressed with improved memory handling. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, iP…
-
Medium 4.3
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 18.4, iOS 18.4 and …
References
-
report
https://ubuntu.com/security/CVE-2024-54551
-
report
https://ubuntu.com/security/CVE-2025-24208
-
report
https://ubuntu.com/security/CVE-2025-24209
-
report
https://ubuntu.com/security/CVE-2025-24213
-
report
https://ubuntu.com/security/CVE-2025-24216
-
report
https://ubuntu.com/security/CVE-2025-24264
-
report
https://ubuntu.com/security/CVE-2025-30427