← Database

CVE-2023-2203

HIGH CVSS: 8.8 Published: 2023-05-17 Modified: 2026-06-17

Description

A flaw was found in the WebKitGTK package. An improper input validation issue may lead to a use-after-free vulnerability. This flaw allows attackers with network access to pass specially crafted web content files, causing a denial of service or arbitrary code execution. This CVE exists because of a CVE-2023-28205 security regression for the WebKitGTK package in Red Hat Enterprise Linux 8.8 and Red Hat Enterprise Linux 9.2.

Affected Platforms

Webkitgtk Webkit2Gtk3Redhat Enterprise Linux Server TusRedhat Enterprise LinuxRedhat Enterprise Linux EusRedhat Enterprise Linux Server Aus

Weakness Type

CWE-416, CWE-416

References