Back Linuxsecurity

Important Vulnerabilities in Webkit2 for Mageia MGASA-2025

Linuxsecurity •LinuxSecurity Advisories • December 9, 2025

Description: A website may be able to exfiltrate sensitive system information. Description: The issue was addressed through improved state checks - CVE-2025-13947. Processing maliciously crafted web content may lead to an unexpected process crash. Description: Multiple issues were addressed by disabling array allocation sinking - CVE-2025-43421. Processing maliciously crafted web content may lead to an unexpected process crash. Description: This issue was addressed through improved state management - CVE-2025-43458. Processing maliciously crafted web content may lead to an unexpected process crash. Description: The issue was addressed with improved memory handling - CVE-2025-66287.

- - - - - - -

MGASA-2025-0325 - Updated webkit2 packages fix security vulnerabilities

- 9/core/webkit2-2.50.3-1.mga9

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Vulnerabilities in Webkit2 Affecting Mageia Users Mageia has addressed several vulnerabilities in Webkit2 that could lead to process crashes and potential information exfiltration. Key issues include buffer overflow and race condition vulnerabilities, which were mitigated through improved memory handling and state checks. Affected CVEs include CVE-2025-43501, CVE-2025-13947, and CVE-2025-43421. 2 sources 18

Extracted Entities

CVEs (4)

CVE-2025-13947 CVE-2025-43421 CVE-2025-43458 CVE-2025-66287

Platforms (1)

Webkit2