A flaw was found in the WebKitGTK package. An improper input validation issue may lead to a use-after-free vulnerability. This flaw allows attackers with network access to pass specially crafted web content files, causing a denial of service or arbitrary code execution. This CVE exists because of a CVE-2023-28205 security regression for the WebKitGTK package in Red Hat Enterprise Linux 8.8 and Red Hat Enterprise Linux 9.2.
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory “belongs” to the code that operates on the new pointer.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Webkit2gtk3 | Webkitgtk | 2.38.5-1.el8 (including) | 2.38.5-1.el8 (including) |
| Webkit2gtk3 | Webkitgtk | 2.38.5-1.el9 (including) | 2.38.5-1.el9 (including) |
| Red Hat Enterprise Linux 8 | RedHat | webkit2gtk3-0:2.38.5-1.el8_8.3 | * |
| Red Hat Enterprise Linux 9 | RedHat | webkit2gtk3-0:2.38.5-1.el9_2.1 | * |
| Qtwebkit-opensource-src | Ubuntu | trusty | * |
| Qtwebkit-opensource-src | Ubuntu | xenial | * |
| Qtwebkit-source | Ubuntu | trusty | * |
| Qtwebkit-source | Ubuntu | xenial | * |
| Webkit2gtk | Ubuntu | bionic | * |
| Webkit2gtk | Ubuntu | esm-infra/bionic | * |
| Webkit2gtk | Ubuntu | esm-infra/xenial | * |
| Webkit2gtk | Ubuntu | xenial | * |
| Webkitgtk | Ubuntu | trusty | * |
| Webkitgtk | Ubuntu | xenial | * |
| Wpewebkit | Ubuntu | trusty | * |