CVE-2023-25358

Description

A use-after-free vulnerability in WebCore::RenderLayer::addChild in WebKitGTK before 2.36.8 allows attackers to execute code remotely.

Affected Platforms

Weakness Type

CWE-416, CWE-416

References

• http://www.openwall.com/lists/oss-security/2023/04/21/3
• https://bugs.webkit.org/show_bug.cgi?id=242683
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro…
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro…
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro…
• https://security.gentoo.org/glsa/202305-32