CVE-2025-13502

Discovered by AISLEPUBLISHEDCWE-125

Description

A flaw was found in WebKitGTK and WPE WebKit. This vulnerability allows an out-of-bounds read and integer underflow, leading to a UIProcess crash (DoS) via a crafted payload to the GLib remote inspector server.

CVSS Base Scores

CVSS v3.1(Primary)
7.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersionStatus
The WebKitGTK Teamwebkitgtk0affected
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support0:2.50.3-2.el7_9unaffected
Red HatRed Hat Enterprise Linux 80:2.50.3-1.el8_10unaffected
Red HatRed Hat Enterprise Linux 8.2 Advanced Update Support0:2.50.3-2.el8_2unaffected
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support0:2.50.3-2.el8_4unaffected
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On0:2.50.3-2.el8_4unaffected
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support0:2.50.3-2.el8_6unaffected
Red HatRed Hat Enterprise Linux 8.6 Telecommunications Update Service0:2.50.3-2.el8_6unaffected
Red HatRed Hat Enterprise Linux 8.6 Update Services for SAP Solutions0:2.50.3-2.el8_6unaffected
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service0:2.50.3-2.el8_8unaffected
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions0:2.50.3-2.el8_8unaffected
Red HatRed Hat Enterprise Linux 90:2.50.3-1.el9_7unaffected
Red HatRed Hat Enterprise Linux 9.0 Update Services for SAP Solutions0:2.50.3-1.el9_0unaffected
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions0:2.50.3-1.el9_2unaffected
Red HatRed Hat Enterprise Linux 9.4 Extended Update Support0:2.50.3-1.el9_4unaffected
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support0:2.50.3-1.el9_6unaffected
Red HatRed Hat Enterprise Linux 6——
Red HatRed Hat Enterprise Linux 7——

Credits

  • Red Hat would like to thank Aisle Research and Stanislav Fort for reporting this issue.

References