PT-2025-49101 · Webkitgtk+7 · Webkitgtk+7

Published 2025-12-04 · Updated 2026-01-20 · CVE-2025-66287

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions WebKitGTK (affected versions not specified)

Description A flaw exists in WebKitGTK where processing malicious web content can lead to an unexpected process crash due to improper memory handling.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

ALSA-2025:22789

ALSA-2025:22790

BDU:2026-03313

CVE-2025-66287

DLA-4399-1

DSA-6074-1

MGASA-2025-0325

OPENSUSE-SU-2026:20065-1

SUSE-SU-2025:4416-1

SUSE-SU-2025:4423-1

SUSE-SU-2026:0021-1

SUSE-SU-2026:20102-1

USN-7941-1

Affected Products

Almalinux

Centos

Debian

Linuxmint

Red Hat

Rocky Linux

Ubuntu

Webkitgtk

References · 159

• https://errata.rockylinux.org/RLSA-2025:22790 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2025:23583 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-66287 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2025-0325.html · Security Note
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2026-0224SE18 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2025-22789.html · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2025:22789 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2025-22789.html · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2025:23742 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2025:22790 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2026-0421SE17 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2025:22789 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-43458 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2025:22790 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-66287 · Vendor Advisory