CVE-2023-25358

A use-after-free vulnerability in WebCore::RenderLayer::addChild in WebKitGTK before 2.36.8 allows attackers to execute code remotely.

Score

CVSS 3.1 8.8 High

Status

Modified - cve@mitre.org

Published

2023-03-02

Last modified

2025-03-07

Weaknesses

CWE-416

Affected products

• Fedora (Fedoraproject)
• Webkitgtk (Webkitgtk)

References

• http://www.openwall.com/lists/oss-security/2023/04/21/3
• https://bugs.webkit.org/show_bug.cgi?id=242683
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5OKKVEUQAAGH3NHMX3WHWK…
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6QL5OGMSHRQ26FTYWZUXVN…
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KC7DMUX37BRCLAI4VPQYHD…
• https://security.gentoo.org/glsa/202305-32