CVE-2025-43272

Name of the Vulnerable Software and Affected Versions WebKitGTK versions prior to 2.48.7-0ubuntu0.25.04.2 WebKitGTK (affected versions not specified)

Description WebKitGTK is a port of the WebKit web rendering engine to the GTK platform. Several security issues were discovered in the WebKitGTK Web and JavaScript engines. A remote attacker could exploit these issues by tricking a user into viewing a malicious website, potentially leading to cross-site scripting attacks, denial of service attacks, and arbitrary code execution. A specific flaw, identified as CVE-2025-43272, involves improper memory handling when processing malicious web content, which can cause an unexpected process crash. The issue has been addressed with improved memory handling.

Recommendations Update to WebKitGTK version 2.48.7-0ubuntu0.25.04.2 or later. At the moment, there is no information about a newer version that contains a fix for this vulnerability.