Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Debian 11: Webkit2gtk Critical Security Update DLA-4394-1 CVE-2025-43392

debian lts
Calendar Grey December 4, 2025
Dist Debian Esm H88
Critical vulnerabilities found in webkit2gtk require immediate upgrades for Debian 11 users to prevent crashes and data exfiltration.
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2025-43392
Topics%20covered

Topics Covered

security advisory security issue critical debian webkit2gtk process crash

Summary

CVE-2025-43392

Tom Van Goethem discovered that a website may exfiltrate image
data cross-origin.

CVE-2025-43425

An anonymous researcher discovered that processing maliciously
crafted web content may lead to an unexpected process crash.

CVE-2025-43427

Gary Kwong and rheza discovered that processing maliciously
crafted web content may lead to an unexpected process crash.

CVE-2025-43429

Google Big Sleep discovered that processing maliciously crafted
web content may lead to an unexpected process crash.

CVE-2025-43430

Google Big Sleep discovered that processing maliciously crafted
web content may lead to an unexpected process crash.

CVE-2025-43431

Google Big Sleep discovered that processing maliciously crafted
web content may lead to memory corruption.

CVE-2025-43432

Hossein Lotfi discovered that processing maliciously crafted web
content may lead to an unexpected process crash.

CVE-2025-43434

Read the Full Advisory


Severity
critical
Lowest
Low
Medium
High
Critical

Package: webkit2gtk
Version: 2.50.2-1~deb11u1
CVE ID: CVE-2025-43392 CVE-2025-43425 CVE-2025-43427 CVE-2025-43429

Topics%20covered

Topics Covered

security advisory security issue critical debian webkit2gtk process crash

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here