Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 493
Alerts This Week
Warning Icon 1 493

SUSE: WebKit2GTK3 Important Memory Issues 2025:3701-1 CVE-2025-43272

suse
Calendar Grey October 21, 2025
Dist Suse Esm H88
Five important vulnerabilities addressed for webkit2gtk3 in SUSE security update. Immediate installation recommended.
* bsc#1250439 * bsc#1250440 * bsc#1250441 * bsc#1250442 * bsc#1251975

Summary

## This update for webkit2gtk3 fixes the following issues: * CVE-2025-43343: improved memory handling in web content processing to prevent process crash (bsc#1251975) * CVE-2025-43272: improved memory handling to prevent unexpected process crash (bsc#1250439) * CVE-2025-43342: correctness issue was addressed with improved checks to prevent unexcepted process crash (bsc#1250440) * CVE-2025-43356: improved handling of caches to prevent sensor access without consent (bsc#1250441) * CVE-2025-43368: improved memory management to prevent a use-after-free (bsc#1250442) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP7

Topics%20covered

Topics Covered

security advisory SuSE important memory management application crash webkit2gtk3

References

* bsc#1250439

* bsc#1250440

* bsc#1250441

* bsc#1250442

* bsc#1251975

Cross-

* CVE-2025-43272

* CVE-2025-43342

* CVE-2025-43343

* CVE-2025-43356

* CVE-2025-43368

CVSS scores:

* CVE-2025-43272 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

* CVE-2025-43272 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

* CVE-2025-43342 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

* CVE-2025-43342 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

* CVE-2025-43343 ( SUSE ): 8.6

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

* CVE-2025-43343 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

* CVE-2025-43343 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2025:3701-1
Release Date: 2025-10-21T10:11:04Z
Rating: important

Topics%20covered

Topics Covered

security advisory SuSE important memory management application crash webkit2gtk3

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.