Out-of-bounds Read Vulnerability in WebKitGTK and WPE WebKit from Red Hat
CVE-2025-13502
Key Information:
- Vendor
The Webkitgtk Team
- Status
- Vendor
- CVE Published:
- 25 November 2025
What is CVE-2025-13502?
A vulnerability exists in WebKitGTK and WPE WebKit that can trigger an out-of-bounds read and integer underflow. This issue may allow an attacker to cause a denial-of-service condition through a crafted payload directed at the GLib remote inspector server, leading to unexpected application crashes. It is essential for users of these products to be aware of this vulnerability and apply the necessary security updates to mitigate the risks.
Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Red Hat Enterprise Linux 7 Extended Lifecycle Support 0:2.50.3-2.el7_9
Red Hat Enterprise Linux 8 0:2.50.3-1.el8_10
Red Hat Enterprise Linux 8.2 Advanced Update Support 0:2.50.3-2.el8_2
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved