CVE-2023-39434
webkitgtk: processing web content may lead to arbitrary code execution
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. Processing web content may lead to arbitrary code execution.
Se solucionó un problema de Use-After-Free con una gestión de memoria mejorada. Este problema se solucionó en iOS 17 y iPadOS 17, watchOS 10, macOS Sonoma 14. El procesamiento de contenido web puede provocar la ejecución de código arbitrario.
A use-after-free vulnerability was found in WebKitGTK. This issue could allow an attacker to cause memory corruption and execute Remote Code Execution. The victim needs to visit a malicious web page in order for a successful attack to be accomplished.
Multiple vulnerabilities have been found in WebKitGTK+, the worst of which may lead to remote code execution. Versions greater than or equal to 2.42.2:4 are affected.
CVSS Scores
SSVC
- Decision:Track*
Timeline
- 2023-09-14 CVE Reserved
- 2023-09-26 CVE Published
- 2025-04-18 EPSS Updated
- 2025-05-02 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-416: Use After Free
CAPEC
References (10)
| URL | Tag | Source |
|---|---|---|
| http://seclists.org/fulldisclosure/2023/Oct/3 | Mailing List |
|
| http://seclists.org/fulldisclosure/2023/Oct/8 | Mailing List |
|
| http://seclists.org/fulldisclosure/2023/Oct/9 | Mailing List |
|
| http://www.openwall.com/lists/oss-security/2023/09/28/3 | Mailing List |
|
| https://security.gentoo.org/glsa/202401-33 |
|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://support.apple.com/en-us/HT213937 | 2024-01-31 | |
| https://support.apple.com/en-us/HT213938 | 2024-01-31 | |
| https://support.apple.com/en-us/HT213940 | 2024-01-31 | |
| https://access.redhat.com/security/cve/CVE-2023-39434 | 2023-11-14 | |
| https://bugzilla.redhat.com/show_bug.cgi?id=2241405 | 2023-11-14 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Apple Search vendor "Apple" | Ipados Search vendor "Apple" for product "Ipados" | < 17.0 Search vendor "Apple" for product "Ipados" and version " < 17.0" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Iphone Os Search vendor "Apple" for product "Iphone Os" | < 17.0 Search vendor "Apple" for product "Iphone Os" and version " < 17.0" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Macos Search vendor "Apple" for product "Macos" | < 14.0 Search vendor "Apple" for product "Macos" and version " < 14.0" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Watchos Search vendor "Apple" for product "Watchos" | < 10.0 Search vendor "Apple" for product "Watchos" and version " < 10.0" | - |
Affected
| ||||||