Back Linuxsecurity

Mageia 9: webkit2 Important Memory Crash Fix MGASA-2025-0331 CVE-2025

Linuxsecurity •LinuxSecurity Advisories • December 21, 2025

Description: CVE-2025-43501 Processing maliciously crafted web content may lead to an unexpected process crash. Description: A buffer overflow issue was addressed with improved memory handling. VE-2025-43531Processing maliciously crafted web content may lead to an unexpected process crash. Description: A race condition was addressed with improved state handling. CVE-2025-43535 Processing maliciously crafted web content may lead to an unexpected process crash. Description: The issue was addressed with improved memory handling. CVE-2025-43536 Processing maliciously crafted web content may lead to an unexpected process crash. Description: A use-after-free issue was addressed with improved memory management.

- - - - - - -

MGASA-2025-0331 - Updated webkit2 packages fix security vulnerabilities

- 9/core/webkit2-2.50.4-1.mga9

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Vulnerabilities in Webkit2 Affecting Mageia Users Mageia has addressed several vulnerabilities in Webkit2 that could lead to process crashes and potential information exfiltration. Key issues include buffer overflow and race condition vulnerabilities, which were mitigated through improved memory handling and state checks. Affected CVEs include CVE-2025-43501, CVE-2025-13947, and CVE-2025-43421. 2 sources 18

Extracted Entities

CVEs (3)

CVE-2025-43501 CVE-2025-43535 CVE-2025-43536

Platforms (2)

Mageia Webkit2