REDHAT-BUG-2416300: High severity WebKit WebKitGTK vulnerability

Published Nov 21, 2025
·
Updated

Out-of-bounds read and integer underflow vulnerability in the GLib remote inspector server of WebKitGTK and WPE WebKit. The WTF::SocketConnection::readMessage() function uses strlen() over framed, peer-controlled data without constraining the scan to the declared bodySize. If a crafted payload omits a NUL terminator within that body, the function reads beyond the frame boundary, causing an out-of-bounds read and UIProcess crash (DoS). In addition, the computed messageNameLength is not validated against bodySize before calculating parametersSize = bodySize - messageNameLength, risking integer underflow. A remote, unauthenticated client can trigger this condition whenever the remote inspector server is enabled and reachable, but the feature is primarily intended for debugging and is disabled by default, which limits practical exposure.

Affected Software

2 affected components
WebKit WebKitGTK
WebKit WPE WebKit

Event History

Nov 21, 2025
Data Sourced
via Red Hat·07:54 AM
DescriptionSeverityAffected Software
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of REDHAT-BUG-2416300?

The severity of REDHAT-BUG-2416300 is considered to be high due to the potential for out-of-bounds reads and integer underflows.

2

How does REDHAT-BUG-2416300 impact WebKitGTK and WPE WebKit?

REDHAT-BUG-2416300 can lead to vulnerabilities that potentially allow an attacker to execute arbitrary code or crash the application.

3

How do I fix REDHAT-BUG-2416300?

To fix REDHAT-BUG-2416300, update your WebKitGTK and WPE WebKit installations to the latest version provided by your vendor.

4

What versions of WebKitGTK and WPE WebKit are affected by REDHAT-BUG-2416300?

REDHAT-BUG-2416300 affects all versions of WebKitGTK and WPE WebKit that contain the vulnerable code in the WTF::SocketConnection::readMessage() function.

5

What is the nature of the vulnerability in REDHAT-BUG-2416300?

The nature of the vulnerability in REDHAT-BUG-2416300 is an out-of-bounds read and integer underflow caused by improper handling of peer-controlled data.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203
REDHAT-BUG-2416300 - High severity WebKit WebKitGTK vulnerability - SecAlerts