Apple · Ipados · CVE-2025-43272
**Name of the Vulnerable Software and Affected Versions**
WebKitGTK versions prior to 2.48.7-0ubuntu0.25.04.2
WebKitGTK (affected versions not specified)
**Description**
WebKitGTK is a port of the WebKit web rendering engine to the GTK platform. Several security issues were discovered in the WebKitGTK Web and JavaScript engines. A remote attacker could exploit these issues by tricking a user into viewing a malicious website, potentially leading to cross-site scripting attacks, denial of service attacks, and arbitrary code execution. A specific flaw, identified as CVE-2025-43272, involves improper memory handling when processing malicious web content, which can cause an unexpected process crash. The issue has been addressed with improved memory handling.
**Recommendations**
Update to WebKitGTK version 2.48.7-0ubuntu0.25.04.2 or later.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.