Nixpkgs security tracker
Published
Permalink
CVE-2025-13502
7.5 HIGH
- CVSS version (CVSS): 3.1
- Attack Vector (AV): Network (N)
- Attack Complexity (AC): Low (L)
- Privileges Required (PR): None (N)
- User Interaction (UI): None (N)
- Scope (S): Unchanged (U)
- Confidentiality (C): None (N)
- Integrity (I): None (N)
- Availability (A): High (H)
- Modified Attack Vector (MAV): Network (N)
- Modified Attack Complexity (MAC): Low (L)
- Modified Privileges Required (MPR): None (N)
- Modified User Interaction (MUI): None (N)
- Modified Confidentiality (MC): None (N)
- Modified Scope (MS): Unchanged (U)
- Modified Integrity (MI): None (N)
- Modified Availability (MA): High (H)
by @LeSuisse Activity log
- Created suggestion
-
@LeSuisse
ignored
5 packages
- tests.pkg-config.defaultPkgConfigPackages."webkit2gtk-4.0"
- obs-studio-plugins.obs-webkitgtk
- haskellPackages.webkit2gtk3-javascriptcore
- tests.pkg-config.defaultPkgConfigPackages."javascriptcoregtk-4.0"
- tests.pkg-config.defaultPkgConfigPackages."webkit2gtk-web-extension-4.0"
-
@LeSuisse
deleted
maintainer.delete
4 maintainers
- @jtojnar
- @bobby285271
- @hedning
- @dasj19
- @LeSuisse accepted
- @LeSuisse published on GitHub
Webkit: webkitgtk / wpe webkit: out-of-bounds read and integer underflow vulnerability leading to dos
A flaw was found in WebKitGTK and WPE WebKit. This vulnerability allows an out-of-bounds read and integer underflow, leading to a UIProcess crash (DoS) via a crafted payload to the GLib remote inspector server.
References
Affected products
webkitgtk
- <2.50.2
webkitgtk3
webkitgtk4
- *
webkit2gtk3
- *
Matching in nixpkgs
pkgs.webkitgtk_4_0
Web content rendering engine, GTK port
-
nixos-unstable 2.48.6+abi=4.0
- nixpkgs-unstable 2.48.6+abi=4.0
- nixos-unstable-small 2.50.0+abi=4.0
pkgs.webkitgtk_4_1
Web content rendering engine, GTK port
-
nixos-unstable 2.50.1+abi=4.1
- nixpkgs-unstable 2.50.1+abi=4.1
- nixos-unstable-small 2.50.2+abi=4.1
pkgs.webkitgtk_6_0
Web content rendering engine, GTK port
-
nixos-unstable 2.50.1+abi=6.0
- nixpkgs-unstable 2.50.1+abi=6.0
- nixos-unstable-small 2.50.2+abi=6.0
Ignored packages (5)
pkgs.obs-studio-plugins.obs-webkitgtk
Yet another OBS Studio browser source
pkgs.haskellPackages.webkit2gtk3-javascriptcore
JavaScriptCore FFI from webkitgtk
pkgs.tests.pkg-config.defaultPkgConfigPackages.%22webkit2gtk-4.0%22
Test whether webkitgtk-2.48.6+abi=4.0 exposes pkg-config modules webkit2gtk-4.0
pkgs.tests.pkg-config.defaultPkgConfigPackages.%22javascriptcoregtk-4.0%22
Test whether webkitgtk-2.48.6+abi=4.0 exposes pkg-config modules javascriptcoregtk-4.0
pkgs.tests.pkg-config.defaultPkgConfigPackages.%22webkit2gtk-web-extension-4.0%22
Test whether webkitgtk-2.48.6+abi=4.0 exposes pkg-config modules webkit2gtk-web-extension-4.0
Package maintainers
Ignored maintainers (4)
-
@dasj19 Daniel Șerbănescu <daniel@serbanescu.dk>
-
@jtojnar Jan Tojnar <jtojnar@gmail.com>
-
@bobby285271 Bobby Rong <rjl931189261@126.com>
-
@hedning Tor Hedin Brønner <torhedinbronner@gmail.com>