CVE-2025-13502: Webkit: webkitgtk / wpe webkit: out-of-bounds read and integer underflow vulnerability leading to dos
A flaw was found in WebKitGTK and WPE WebKit. This vulnerability allows an out-of-bounds read and integer underflow, leading to a UIProcess crash (DoS) via a crafted payload to the GLib remote inspector server.
Other sources
Out-of-bounds read and integer underflow vulnerability in the GLib remote inspector server of WebKitGTK and WPE WebKit. The WTF::SocketConnection::readMessage() function uses strlen() over framed, peer-controlled data without constraining the scan to the declared bodySize. If a crafted payload omits a NUL terminator within that body, the function reads beyond the frame boundary, causing an out-of-bounds read and UIProcess crash (DoS). In addition, the computed messageNameLength is not validated against bodySize before calculating parametersSize = bodySize - messageNameLength, risking integer underflow. A remote, unauthenticated client can trigger this condition whenever the remote inspector server is enabled and reachable, but the feature is primarily intended for debugging and is disabled by default, which limits practical exposure.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-13502?
CVE-2025-13502 is classified as a high-severity vulnerability due to its potential to cause a denial-of-service condition.
How do I fix CVE-2025-13502?
To fix CVE-2025-13502, users should update to the latest versions of WebKitGTK and WPE WebKit provided by Apple that address this vulnerability.
What types of attacks can CVE-2025-13502 facilitate?
CVE-2025-13502 can facilitate denial-of-service attacks by crashing the UIProcess via crafted payloads sent to the GLib remote inspector server.
Which software is affected by CVE-2025-13502?
CVE-2025-13502 affects Apple WebKitGTK and Apple WPE WebKit applications.
What are the consequences of exploiting CVE-2025-13502?
Exploiting CVE-2025-13502 can lead to a crash of the UIProcess, resulting in the application becoming unresponsive.