Nixpkgs security tracker
Untriaged
Permalink
CVE-2025-13502
7.5 HIGH
- CVSS version: 3.1
- Attack vector (AV): NETWORK
- Attack complexity (AC): LOW
- Privileges required (PR): NONE
- User interaction (UI): NONE
- Scope (S): UNCHANGED
- Confidentiality impact (C): NONE
- Integrity impact (I): NONE
- Availability impact (A): HIGH
Activity log
- Created suggestion
Webkit: webkitgtk / wpe webkit: out-of-bounds read and integer underflow vulnerability leading to dos
A flaw was found in WebKitGTK and WPE WebKit. This vulnerability allows an out-of-bounds read and integer underflow, leading to a UIProcess crash (DoS) via a crafted payload to the GLib remote inspector server.
References
Affected products
webkitgtk
- <2.50.2
webkitgtk3
webkitgtk4
- *
webkit2gtk3
- *
Matching in nixpkgs
pkgs.webkitgtk_4_0
Web content rendering engine, GTK port
-
nixos-unstable 2.48.5+abi=4.0
pkgs.webkitgtk_4_1
Web content rendering engine, GTK port
-
nixos-unstable 2.48.5+abi=4.1
- nixpkgs-unstable 2.50.4+abi=4.1
- nixos-unstable-small 2.50.4+abi=4.1
-
nixos-25.11 2.50.4+abi=4.1
- nixpkgs-25.11-darwin 2.50.4+abi=4.1
pkgs.webkitgtk_6_0
Web content rendering engine, GTK port
-
nixos-unstable 2.48.5+abi=6.0
- nixpkgs-unstable 2.50.4+abi=6.0
- nixos-unstable-small 2.50.4+abi=6.0
-
nixos-25.11 2.50.4+abi=6.0
- nixpkgs-25.11-darwin 2.50.4+abi=6.0
pkgs.obs-studio-plugins.obs-webkitgtk
Yet another OBS Studio browser source
-
nixos-unstable 2023-11-10
pkgs.haskellPackages.webkit2gtk3-javascriptcore
JavaScriptCore FFI from webkitgtk
-
nixos-unstable 0.14.4.6
pkgs.tests.pkg-config.defaultPkgConfigPackages.%22webkit2gtk-4.0%22
Test whether webkitgtk-2.48.5+abi=4.0 exposes pkg-config modules webkit2gtk-4.0
-
nixos-unstable -
pkgs.tests.pkg-config.defaultPkgConfigPackages.%22javascriptcoregtk-4.0%22
Test whether webkitgtk-2.48.5+abi=4.0 exposes pkg-config modules javascriptcoregtk-4.0
-
nixos-unstable -
pkgs.tests.pkg-config.defaultPkgConfigPackages.%22webkit2gtk-web-extension-4.0%22
Test whether webkitgtk-2.48.5+abi=4.0 exposes pkg-config modules webkit2gtk-web-extension-4.0
-
nixos-unstable -
Package maintainers
-
@j-hui John Hui <j-hui@cs.columbia.edu>
-
@jtojnar Jan Tojnar <jtojnar@gmail.com>
-
@hedning Tor Hedin Brønner <torhedinbronner@gmail.com>
-
@bobby285271 Bobby Rong <rjl931189261@126.com>
-
@dasj19 Daniel Șerbănescu <daniel@serbanescu.dk>