Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2025-13502

Опубликовано: 25 нояб. 2025
Источник: ubuntu
Приоритет: medium
CVSS3: 7.5

Описание

A flaw was found in WebKitGTK and WPE WebKit. This vulnerability allows an out-of-bounds read and integer underflow, leading to a UIProcess crash (DoS) via a crafted payload to the GLib remote inspector server.

РелизСтатусПримечание
devel

DNE

esm-apps/bionic

ignored

esm-apps/focal

ignored

esm-apps/jammy

ignored

esm-apps/noble

ignored

esm-infra/xenial

ignored

jammy

ignored

noble

ignored

plucky

DNE

questing

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-apps/bionic

ignored

esm-apps/xenial

ignored

jammy

DNE

noble

DNE

plucky

DNE

questing

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

released

2.50.2-1ubuntu1
esm-infra/bionic

ignored

esm-infra/focal

ignored

esm-infra/xenial

ignored

jammy

released

2.50.2-0ubuntu0.22.04.2
noble

released

2.50.2-0ubuntu0.24.04.2
plucky

released

2.50.2-0ubuntu0.25.04.2
questing

released

2.50.2-0ubuntu0.25.10.2
upstream

released

2.50.2

Показывать по

РелизСтатусПримечание
devel

DNE

esm-apps/bionic

ignored

esm-apps/xenial

ignored

jammy

DNE

noble

DNE

plucky

DNE

questing

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-apps/focal

ignored

esm-apps/jammy

ignored

jammy

ignored

noble

DNE

plucky

DNE

questing

DNE

upstream

needs-triage

Показывать по

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 7.5
nvd
2 месяца назад

A flaw was found in WebKitGTK and WPE WebKit. This vulnerability allows an out-of-bounds read and integer underflow, leading to a UIProcess crash (DoS) via a crafted payload to the GLib remote inspector server.

CVSS3: 7.5
debian
2 месяца назад

A flaw was found in WebKitGTK and WPE WebKit. This vulnerability allow ...

CVSS3: 7.5
github
2 месяца назад

A flaw was found in WebKitGTK and WPE WebKit. This vulnerability allows an out-of-bounds read and integer underflow, leading to a UIProcess crash (DoS) via a crafted payload to the GLib remote inspector server.

rocky
2 месяца назад

Important: webkit2gtk3 security update

rocky
2 месяца назад

Important: webkit2gtk3 security update

7.5 High

CVSS3

Уязвимость CVE-2025-13502