Red Hat Security AdvisoryRHSA-2025:23975
webkitgtk4 security update
Released 2025-12-24 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server (v. 7 ELS) webkitgtk4-2.50.4-2.el7_9, webkitgtk4-devel-2.50.4-2.el7_9, webkitgtk4-jsc-2.50.4-2.el7_9 +1
- Red Hat Enterprise Linux Server Optional (v. 7 ELS) webkitgtk4-devel-2.50.4-2.el7_9, webkitgtk4-doc-2.50.4-2.el7_9, webkitgtk4-jsc-devel-2.50.4-2.el7_9
Fixes 7 records
Priority CRITICAL 97KEV
A use-after-free issue was addressed with improved memory management.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.2565 · Published 2025-12-17 · Partial fix · 26.2, 18.7.3 CWE-416
Priority CRITICAL 97KEV
Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.55334 · Published 2025-12-12 · Fixed in 143.0.7499.110 CWE-119
Priority MEDIUM 47
A type confusion issue was addressed with improved state handling.
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.3414 · Published 2025-12-17 · Partial fix · 26.2, 18.7.3 CWE-843
Priority LOW 23
A buffer overflow issue was addressed with improved memory handling.
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00773 · Published 2025-12-17 · Partial fix · 26.2, 18.7.3 CWE-120
Priority LOW 22
The issue was addressed with improved memory handling.
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00849 · Published 2025-12-17 · Partial fix · 26.2, 18.7.3
Priority LOW 21
A use-after-free issue was addressed with improved memory management.
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00577 · Published 2025-12-17 · Partial fix · 26.2, 18.7.3 CWE-416
Priority LOW 16
A race condition was addressed with improved state handling.
CVSS 3.1LOW 3.1· Network · No auth · User interaction · EPSS 0.00454 · Published 2025-12-17 · Partial fix · 26.2, 18.7.3 CWE-362