Skip to content
OpenAdvisories
High · 8.8 Known exploited CVE-2023-32439 EUVD-2023-36683GHSA-rh53-wvg6-9v8m

A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.5.1 and iPadOS 16.5.1, iOS 15.7.7 and iPadOS 15.7.…

Published Jun 23, 2023 · Updated Oct 21, 2025 · Assigned by apple

Vendor: Apple Product: iOS and iPadOS Product: macOS Product: Safari Package: qtwebkit-opensource-src Package: qtwebkit-source Package: webkit2gtk Package: webkit2gtk Package: webkitgtk Package: wpewebkit Package: wpewebkit Platform: iOS Platform: macOS Category: Browsers Ecosystem: Debian Ecosystem: Ubuntu

Description

A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.5.1 and iPadOS 16.5.1, iOS 15.7.7 and iPadOS 15.7.7, macOS Ventura 13.4.1, Safari 16.5.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

Affected products

VendorProductAffectedFixed
Apple iOS and iPadOS unspecified – < 15.7, unspecified – < 16.5 15.7
Apple Safari unspecified – < 16.5 16.5
Apple macOS unspecified – < 13.4 13.4

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 wpewebkit +1 2.40.3-1 —
Debian 13 wpewebkit +1 2.40.3-1 —
Debian 12 webkit2gtk 2.40.3-2~deb12u1 DSA-5449-1
Debian 12 wpewebkit No fix yet —
Debian 11 webkit2gtk 2.40.3-2~deb11u1 DSA-5449-1

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 24.04 LTS qtwebkit-opensource-src No fix yet —
Ubuntu 22.04 LTS webkit2gtk 2.40.4-0ubuntu0.22.04.1 USN-6264-1
Ubuntu 22.04 LTS wpewebkit +1 No fix yet —
Ubuntu 20.04 LTS wpewebkit +2 No fix yet —
Ubuntu 18.04 LTS webkitgtk +3 No fix yet —
Ubuntu 16.04 LTS webkitgtk +3 No fix yet —

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 9 webkit2gtk3 +3 2.38.5-1.el9_2.3 RHSA-2023:4201
RHEL 8 webkit2gtk3 +3 2.38.5-1.el8_8.5 RHSA-2023:4202
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
RHEL 7 ELS webkitgtk4 +4 2.48.3-2.el7_9 RHSA-2025:10364

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 9 webkit2gtk3 +3 2.38.5-1.el9_2.3 ALSA-2023:4201
AlmaLinux 8 webkit2gtk3 +3 2.38.5-1.el8_8.5.alma ALSA-2023:4202

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 9 webkit2gtk3 2.38.5-1.el9_2.3 RLSA-2023:4201
Rocky Linux 8 webkit2gtk3 2.38.5-1.el8_8.5 RLSA-2023:4202

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP5 webkit2gtk3 +2 2.40.5-150400.4.45.3 SUSE-SU-2023:3419-1
SLES 15 SP4 webkit2gtk3 +2 2.40.5-150400.4.45.3 SUSE-SU-2023:3419-1
SLES 15 SP3 webkit2gtk3 2.40.5-150200.78.1 SUSE-SU-2023:3233-1
SLES 15 SP2 webkit2gtk3 2.40.5-150200.78.1 SUSE-SU-2023:3233-1
SLES 15 SP1 webkit2gtk3 2.40.5-150000.3.144.1 SUSE-SU-2023:3300-1
Show 12 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 12 SP5 webkit2gtk3 2.40.5-2.146.1 SUSE-SU-2023:3237-1
SLES 12 SP2 webkit2gtk3 2.40.5-2.146.1 SUSE-SU-2023:3237-1
SLES for SAP 15 SP3 webkit2gtk3 2.40.5-150200.78.1 SUSE-SU-2023:3233-1
SLES for SAP 15 SP2 webkit2gtk3 2.40.5-150200.78.1 SUSE-SU-2023:3233-1
SLES for SAP 15 SP1 webkit2gtk3 2.40.5-150000.3.144.1 SUSE-SU-2023:3300-1
SLES for SAP 12 SP5 webkit2gtk3 2.40.5-2.146.1 SUSE-SU-2023:3237-1
SLE HPC 15 SP3 webkit2gtk3 2.40.5-150200.78.1 SUSE-SU-2023:3233-1
SLE HPC 15 SP2 webkit2gtk3 2.40.5-150200.78.1 SUSE-SU-2023:3233-1
SLE HPC 15 SP1 webkit2gtk3 2.40.5-150000.3.144.1 SUSE-SU-2023:3300-1
SUSE Manager Server 4.2 webkit2gtk3 2.40.5-150200.78.1 SUSE-SU-2023:3233-1
SUSE Manager Proxy 4.2 webkit2gtk3 2.40.5-150200.78.1 SUSE-SU-2023:3233-1
SUSE Enterprise Storage 7.1 webkit2gtk3 2.40.5-150200.78.1 SUSE-SU-2023:3233-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Leap 15.5 webkit2gtk3 +2 2.40.5-150400.4.45.3 SUSE-SU-2023:3419-1
openSUSE Leap 15.4 webkit2gtk3 +2 2.40.5-150400.4.45.3 SUSE-SU-2023:3419-1

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2 webkitgtk4 +3 2.38.5-3.amzn2.0.2 ALAS2-2023-2141

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 9 webkit2gtk3 +3 2.38.5-1.el9_2.3 ELSA-2023-4201
Oracle Linux 8 webkit2gtk3 +3 2.38.5-1.el8_8.5 ELSA-2023-4202

Advisories 21

References