PT-2025-37795 · Apple+8 · Ipados+14
Big Bear
·
Published
2025-09-15
·
Updated
2026-01-20
·
CVE-2025-43272
CVSS v2.0
7.8
High
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
WebKitGTK versions prior to 2.48.7-0ubuntu0.25.04.2
WebKitGTK (affected versions not specified)
Description
WebKitGTK is a port of the WebKit web rendering engine to the GTK platform. Several security issues were discovered in the WebKitGTK Web and JavaScript engines. A remote attacker could exploit these issues by tricking a user into viewing a malicious website, potentially leading to cross-site scripting attacks, denial of service attacks, and arbitrary code execution. A specific flaw, identified as CVE-2025-43272, involves improper memory handling when processing malicious web content, which can cause an unexpected process crash. The issue has been addressed with improved memory handling.
Recommendations
Update to WebKitGTK version 2.48.7-0ubuntu0.25.04.2 or later.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
DoS
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Almalinux
Centos
Debian
Linuxmint
Apple Macos
Red Hat
Rocky Linux
Safari
Suse
Ubuntu
Ios
Ipados
Macos Tahoe
Visionos
Watchos