crítica
CVE-2025-24201
webkitgtk: out-of-bounds write vulnerability
En la Trivy database desde, como mínimo, el 24 oct 2026, 07:11 UTCNo consta cuándo entró antes de ese build.
Severidad por fuente
NVD10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Red Hat7.5CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
La etiqueta propia de Trivy es CRITICAL. Crítica según NVD. Más baja según Red Hat (alta), AlmaLinux (alta), Amazon (alta), Oracle (alta), Rocky Linux (alta), Ubuntu (alta).
Descripción
An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in Safari 18.3.1, iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 18.3.2 and iPadOS 18.3.2, iPadOS 17.7.6, macOS Sequoia 15.3.2, visionOS 2.3.2, watchOS 11.4. Maliciously crafted web content may be able to break out of Web Content sandbox. This is a supplementary fix for an attack that was blocked in iOS 17.2. (Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 17.2.).
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| alma 8 | webkit2gtk3, webkit2gtk3-devel, webkit2gtk3-jsc y 1 más | 2.46.6-2.el8_10 |
| alma 9 | webkit2gtk3, webkit2gtk3-devel, webkit2gtk3-jsc y 1 más | 2.46.6-2.el9_5 |
| alpine 3.21 | qt5-qtwebengine | 5.15.17-r7 |
| alpine 3.22 | qt5-qtwebengine, qt6-qtwebengine | 5.15.17-r10 y 1 más |
| alpine 3.23 | qt5-qtwebengine, qt6-qtwebengine | 5.15.17-r10 y 1 más |
| alpine 3.24 | qt6-qtwebengine | 6.8.2-r3 |
| alpine edge | qt6-qtwebengine | 6.8.2-r3 |
| amazon linux 2 | webkitgtk4, webkitgtk4-debuginfo, webkitgtk4-devel y 2 más | 2.46.6-1.amzn2.0.2 |
| debian 11 | webkit2gtk, wpewebkit | 2.48.3-1~deb11u1 |
| debian 12 | chromium, webkit2gtk, wpewebkit | 134.0.6998.88-1~deb12u1 y 1 más |
| debian 13 | webkit2gtk, wpewebkit | 2.48.0-1 |
| debian 14 | webkit2gtk, wpewebkit | 2.48.0-1 |
Mostrar las 73 entradas de 28 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| alma 8 | webkit2gtk3 | 2.46.6-2.el8_10 |
| alma 8 | webkit2gtk3-devel | 2.46.6-2.el8_10 |
| alma 8 | webkit2gtk3-jsc | 2.46.6-2.el8_10 |
| alma 8 | webkit2gtk3-jsc-devel | 2.46.6-2.el8_10 |
| alma 9 | webkit2gtk3 | 2.46.6-2.el9_5 |
| alma 9 | webkit2gtk3-devel | 2.46.6-2.el9_5 |
| alma 9 | webkit2gtk3-jsc | 2.46.6-2.el9_5 |
| alma 9 | webkit2gtk3-jsc-devel | 2.46.6-2.el9_5 |
| alpine 3.21 | qt5-qtwebengine | 5.15.17-r7 |
| alpine 3.22 | qt5-qtwebengine | 5.15.17-r10 |
| alpine 3.22 | qt6-qtwebengine | 6.8.2-r3 |
| alpine 3.23 | qt5-qtwebengine | 5.15.17-r10 |
| alpine 3.23 | qt6-qtwebengine | 6.8.2-r3 |
| alpine 3.24 | qt6-qtwebengine | 6.8.2-r3 |
| alpine edge | qt6-qtwebengine | 6.8.2-r3 |
| amazon linux 2 | webkitgtk4 | 2.46.6-1.amzn2.0.2 |
| amazon linux 2 | webkitgtk4-debuginfo | 2.46.6-1.amzn2.0.2 |
| amazon linux 2 | webkitgtk4-devel | 2.46.6-1.amzn2.0.2 |
| amazon linux 2 | webkitgtk4-jsc | 2.46.6-1.amzn2.0.2 |
| amazon linux 2 | webkitgtk4-jsc-devel | 2.46.6-1.amzn2.0.2 |
| debian 11 | webkit2gtk | 2.48.3-1~deb11u1 |
| debian 11 | wpewebkit | sin corrección indicada |
| debian 12 | chromium | 134.0.6998.88-1~deb12u1 |
| debian 12 | webkit2gtk | 2.48.0-1~deb12u1 |
| debian 12 | wpewebkit | sin corrección indicada |
| debian 13 | webkit2gtk | 2.48.0-1 |
| debian 13 | wpewebkit | 2.48.0-1 |
| debian 14 | webkit2gtk | 2.48.0-1 |
| debian 14 | wpewebkit | 2.48.0-1 |
| echo | chromium | 134.0.6998.88-1~deb12u1 |
| echo | webkit2gtk | 2.48.0-1~deb12u1 |
| echo | wpewebkit | 2.48.0-1 |
| Oracle Linux 8 | webkit2gtk3 | 2.46.6-2.el8_10 |
| Oracle Linux 8 | webkit2gtk3-devel | 2.46.6-2.el8_10 |
| Oracle Linux 8 | webkit2gtk3-jsc | 2.46.6-2.el8_10 |
| Oracle Linux 8 | webkit2gtk3-jsc-devel | 2.46.6-2.el8_10 |
| Oracle Linux 9 | webkit2gtk3 | 2.46.6-2.el9_5 |
| Oracle Linux 9 | webkit2gtk3-devel | 2.46.6-2.el9_5 |
| Oracle Linux 9 | webkit2gtk3-jsc | 2.46.6-2.el9_5 |
| Oracle Linux 9 | webkit2gtk3-jsc-devel | 2.46.6-2.el9_5 |
| rapidfort alpine 3.20 | qt5-qtwebengine | 5.15.17-r7 |
| rapidfort alpine 3.20 | qt6-qtwebengine | 6.8.2-r3 |
| rapidfort alpine 3.21 | qt5-qtwebengine | 5.15.17-r7 |
| rapidfort alpine 3.21 | qt6-qtwebengine | 6.8.2-r3 |
| rapidfort alpine 3.22 | qt6-qtwebengine | 6.8.2-r3 |
| rapidfort alpine 3.23 | qt5-qtwebengine | 5.15.17-r7 |
| rapidfort alpine 3.23 | qt6-qtwebengine | 6.8.2-r3 |
| rapidfort alpine 3.24 | qt5-qtwebengine | 5.15.17-r7 |
| rapidfort alpine 3.24 | qt6-qtwebengine | 6.8.2-r3 |
| rapidfort debian 12 | chromium | 0:134.0.6998.88-1~deb12u1 |
| rapidfort debian 12 | webkit2gtk | 0:2.48.0-1, 0:2.48.0-1~deb12u1, 0:2.48.3-1~deb11u1 |
| rapidfort debian 12 | wpewebkit | 0:2.48.0-1 |
| rapidfort debian 13 | chromium | 0:134.0.6998.88-1~deb12u1 |
| rapidfort debian 13 | webkit2gtk | 0:2.48.0-1, 0:2.48.0-1~deb12u1, 0:2.48.3-1~deb11u1 |
| rapidfort debian 13 | wpewebkit | 0:2.48.0-1 |
| rapidfort Oracle Linux 9 | webkit2gtk3 | 0:2.46.6-2.el9_5 |
| rapidfort Oracle Linux 9 | webkit2gtk3-devel | 0:2.46.6-2.el9_5 |
| rapidfort Oracle Linux 9 | webkit2gtk3-jsc | 0:2.46.6-2.el9_5 |
| rapidfort Oracle Linux 9 | webkit2gtk3-jsc-devel | 0:2.46.6-2.el9_5 |
| Red Hat | libwebkit2gtk | sin corrección indicada |
| Red Hat | webkitgtk | sin corrección indicada |
| Red Hat | webkitgtk-devel | sin corrección indicada |
| Red Hat | webkitgtk-doc | sin corrección indicada |
| Red Hat | webkitgtk3 | sin corrección indicada |
| Red Hat | webkitgtk3-devel | sin corrección indicada |
| Red Hat | webkitgtk3-doc | sin corrección indicada |
| rocky 8 | webkit2gtk3 | 2.46.6-2.el8_10 |
| rocky 8 | webkit2gtk3-devel | 2.46.6-2.el8_10 |
| rocky 8 | webkit2gtk3-jsc | 2.46.6-2.el8_10 |
| rocky 8 | webkit2gtk3-jsc-devel | 2.46.6-2.el8_10 |
| ubuntu 22.04 | webkit2gtk | 2.48.0-0ubuntu0.22.04.1 |
| ubuntu 24.04 | webkit2gtk | 2.48.0-0ubuntu0.24.04.1 |
| ubuntu 24.10 | webkit2gtk | 2.48.0-0ubuntu0.24.10.1 |
Referencias
- http://seclists.org/fulldisclosure/2025/Apr/16
- http://seclists.org/fulldisclosure/2025/Apr/7
- http://seclists.org/fulldisclosure/2025/Jun/19
- http://seclists.org/fulldisclosure/2025/Mar/2
- http://seclists.org/fulldisclosure/2025/Mar/3
- http://seclists.org/fulldisclosure/2025/Mar/4
- http://seclists.org/fulldisclosure/2025/Mar/5
- http://seclists.org/fulldisclosure/2025/Oct/1
Las 37 referencias
- http://seclists.org/fulldisclosure/2025/Oct/31
- https://access.redhat.com/errata/RHSA-2025:2863
- https://access.redhat.com/errata/RHSA-2025:2864
- https://access.redhat.com/security/cve/CVE-2025-24201
- https://bugzilla.redhat.com/2351802
- https://bugzilla.redhat.com/show_bug.cgi?id=2351802
- https://creativecommons.org/licenses/by/4.0/
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24201
- https://errata.almalinux.org/9/ALSA-2025-2864.html
- https://errata.rockylinux.org/RLSA-2025:2863
- https://github.com/JGoyd/Glass-Cage-iOS18-CVE-2025-24085-CVE-2025-24201
- https://github.com/cisagov/vulnrichment/issues/194
- https://linux.oracle.com/cve/CVE-2025-24201.html
- https://linux.oracle.com/errata/ELSA-2025-2864.html
- https://lists.debian.org/debian-lts-announce/2025/06/msg00016.html
- https://nvd.nist.gov/vuln/detail/CVE-2025-24201
- https://support.apple.com/en-us/122281
- https://support.apple.com/en-us/122283
- https://support.apple.com/en-us/122284
- https://support.apple.com/en-us/122285
- https://support.apple.com/en-us/122345
- https://support.apple.com/en-us/122346
- https://support.apple.com/en-us/122372
- https://support.apple.com/en-us/122376
- https://ubuntu.com/security/notices/USN-7395-1
- https://webkitgtk.org/security/WSA-2025-0002.html
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-24201
- https://www.cve.org/CVERecord?id=CVE-2025-24201