Executive brief
WebKitGTK is a web browser engine used across GNOME applications, embedded devices, and Linux systems to render web content. A memory corruption flaw allows attackers to crash applications or potentially execute arbitrary code by processing specially crafted malicious web pages.
Technical details
A memory handling flaw in WebKitGTK causes improper memory management when processing malicious web content. The vulnerability exists in the web content rendering path, requiring only network-reachable access and user navigation to a malicious webpage (no authentication required). An attacker can trigger memory corruption to cause denial of service (application crash) or potentially achieve code execution. The flaw affects WebKitGTK's core rendering engine; patches are available in updated releases.
Affected products
- WebKitGTK WebKitGTK
Timeline
- 2026-08-31: disclosed