| Name | CVE-2023-43000 |
| Description | A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16.6 and iPadOS 16.6, Safari 16.6. Processing maliciously crafted web content may lead to memory corruption. |
| Source | CVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more) |
| References | DSA-5527-1 |
Vulnerable and fixed packages
The table below lists information on source packages.
| Source Package | Release | Version | Status |
|---|
| webkit2gtk (PTS) | bullseye | 2.44.2-1~deb11u1 | fixed |
| bullseye (security) | 2.50.4-1~deb11u1 | fixed |
| bookworm | 2.48.5-1~deb12u1 | fixed |
| bookworm (security) | 2.50.4-1~deb12u1 | fixed |
| trixie | 2.50.1-1~deb13u1 | fixed |
| trixie (security) | 2.50.4-1~deb13u1 | fixed |
| forky, sid | 2.50.4-1 | fixed |
| wpewebkit (PTS) | bullseye (security), bullseye | 2.38.6-1~deb11u1 | vulnerable |
| bookworm | 2.38.6-1 | vulnerable |
| trixie | 2.48.3-1 | fixed |
| forky, sid | 2.50.4-1 | fixed |
The information below is based on the following data on fixed versions.
Notes
[bookworm] - wpewebkit <ignored> (wpewebkit not covered by security support in Bookworm)
[bullseye] - wpewebkit <ignored> (wpewebkit >= 2.40 can no longer be sensibly backported)
https://webkitgtk.org/security/WSA-2025-0008.html