CVE catalog

CVE-2016-1856

libjavascriptcoregtk-4_0-18-2.14.2-2.1 on GA media

Severity: High · CVSS 8.8CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Published: May 20, 2016, 12:00:00 AM UTC
Updated: Oct 8, 2026, 12:49:40 PM UTC
Source: [NVD] · [CVE record]
EPSS: 2.59% · Oct 25, 2026

WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-1854, CVE-2016-1855, and CVE-2016-1857.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Ubuntu	webkit2gtk	16.04	`2.8.5+dfsg1-3`	vulnerable
Ubuntu	webkit2gtk	16.04	`2.10.3+dfsg1-1`	vulnerable
Ubuntu	webkit2gtk	16.04	`2.10.4+dfsg1-1`	vulnerable
Ubuntu	webkit2gtk	16.04	`2.10.5-1`	vulnerable
Ubuntu	webkit2gtk	16.04	`2.10.6-1`	vulnerable
Ubuntu	webkit2gtk	16.04	`2.10.6-1ubuntu1`	vulnerable
Ubuntu	webkit2gtk	16.04	`2.10.8-1ubuntu1`	vulnerable
Ubuntu	webkit2gtk	16.04	`2.10.9-1ubuntu1`	vulnerable
Ubuntu	webkit2gtk	16.04	`2.12.5-0ubuntu0.16.04.1`	fixed
Ubuntu	qtwebkit-opensource-src	16.04	`5.4.2+dfsg-1ubuntu2.1`	vulnerable
Ubuntu	qtwebkit-opensource-src	16.04	`5.5.1+dfsg-2ubuntu1`	vulnerable
Ubuntu	qtwebkit-source	16.04	`2.3.2-0ubuntu10`	vulnerable
Ubuntu	qtwebkit-source	16.04	`2.3.2-0ubuntu11`	vulnerable
Ubuntu	webkitgtk	16.04	`2.4.9-2ubuntu2`	vulnerable
Ubuntu	webkitgtk	16.04	`2.4.10-0ubuntu1`	vulnerable
Ubuntu	webkitgtk	16.04	`2.4.11-0ubuntu0.1`	vulnerable
Opensuse	gtk3	tumbleweed	`2.14.2-2.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Ubuntu	webkit2gtk	deb	16.04	`2.12.5-0ubuntu0.16.04.1`	Not reported	UBUNTU-CVE-2016-1856	Not reported
Opensuse	gtk3	rpm	tumbleweed	`2.14.2-2.1`	Not reported	OPENSUSE-SU-2024:10572-1	Not reported

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[openSUSE Tumbleweed]

[gettext-its-gtk3]Unknown
Source package: [gtk3]
Details (1)
- 3.24.52-2.2 · noarch · tumbleweed
  Unknown · Fixed: 2.14.2-2.1
  Version impact unknown
  pypi · gtk3 · opensuse · tumbleweed
[gtk3-branding-upstream]Unknown
Source package: [gtk3]
Details (1)
- 3.24.52-2.2 · noarch · tumbleweed
  Unknown · Fixed: 2.14.2-2.1
  Version impact unknown
  pypi · gtk3 · opensuse · tumbleweed
[gtk3-data]Unknown
Source package: [gtk3]
Details (1)
- 3.24.52-2.2 · noarch · tumbleweed
  Unknown · Fixed: 2.14.2-2.1
  Version impact unknown
  pypi · gtk3 · opensuse · tumbleweed
[gtk3-devel]Unknown
Source package: [gtk3]
Details (1)
- 3.24.52-2.2 · x86_64 · tumbleweed
  Unknown · Fixed: 2.14.2-2.1
  Version impact unknown
  pypi · gtk3 · opensuse · tumbleweed
[gtk3-devel-32bit]Unknown
Source package: [gtk3]
Details (1)
- 3.24.52-2.2 · x86_64 · tumbleweed
  Unknown · Fixed: 2.14.2-2.1
  Version impact unknown
  pypi · gtk3 · opensuse · tumbleweed
[gtk3-devel-doc]Unknown
Source package: [gtk3]
Details (1)
- 3.24.52-2.2 · noarch · tumbleweed
  Unknown · Fixed: 2.14.2-2.1
  Version impact unknown
  pypi · gtk3 · opensuse · tumbleweed
[gtk3-immodule-amharic]Unknown
Source package: [gtk3]
Details (1)
- 3.24.52-2.2 · x86_64 · tumbleweed
  Unknown · Fixed: 2.14.2-2.1
  Version impact unknown
  pypi · gtk3 · opensuse · tumbleweed
[gtk3-immodule-amharic-32bit]Unknown
Source package: [gtk3]
Details (1)
- 3.24.52-2.2 · x86_64 · tumbleweed
  Unknown · Fixed: 2.14.2-2.1
  Version impact unknown
  pypi · gtk3 · opensuse · tumbleweed
[gtk3-immodule-broadway]Unknown
Source package: [gtk3]
Details (1)
- 3.24.52-2.2 · x86_64 · tumbleweed
  Unknown · Fixed: 2.14.2-2.1
  Version impact unknown
  pypi · gtk3 · opensuse · tumbleweed
[gtk3-immodule-inuktitut]Unknown
Source package: [gtk3]
Details (1)
- 3.24.52-2.2 · x86_64 · tumbleweed
  Unknown · Fixed: 2.14.2-2.1
  Version impact unknown
  pypi · gtk3 · opensuse · tumbleweed
[gtk3-immodule-inuktitut-32bit]Unknown
Source package: [gtk3]
Details (1)
- 3.24.52-2.2 · x86_64 · tumbleweed
  Unknown · Fixed: 2.14.2-2.1
  Version impact unknown
  pypi · gtk3 · opensuse · tumbleweed
[gtk3-immodule-multipress]Unknown
Source package: [gtk3]
Details (1)
- 3.24.52-2.2 · x86_64 · tumbleweed
  Unknown · Fixed: 2.14.2-2.1
  Version impact unknown
  pypi · gtk3 · opensuse · tumbleweed
[gtk3-immodule-multipress-32bit]Unknown
Source package: [gtk3]
Details (1)
- 3.24.52-2.2 · x86_64 · tumbleweed
  Unknown · Fixed: 2.14.2-2.1
  Version impact unknown
  pypi · gtk3 · opensuse · tumbleweed
[gtk3-immodule-thai]Unknown
Source package: [gtk3]
Details (1)
- 3.24.52-2.2 · x86_64 · tumbleweed
  Unknown · Fixed: 2.14.2-2.1
  Version impact unknown
  pypi · gtk3 · opensuse · tumbleweed
[gtk3-immodule-thai-32bit]Unknown
Source package: [gtk3]
Details (1)
- 3.24.52-2.2 · x86_64 · tumbleweed
  Unknown · Fixed: 2.14.2-2.1
  Version impact unknown
  pypi · gtk3 · opensuse · tumbleweed
[gtk3-immodule-tigrigna]Unknown
Source package: [gtk3]
Details (1)
- 3.24.52-2.2 · x86_64 · tumbleweed
  Unknown · Fixed: 2.14.2-2.1
  Version impact unknown
  pypi · gtk3 · opensuse · tumbleweed
[gtk3-immodule-tigrigna-32bit]Unknown
Source package: [gtk3]
Details (1)
- 3.24.52-2.2 · x86_64 · tumbleweed
  Unknown · Fixed: 2.14.2-2.1
  Version impact unknown
  pypi · gtk3 · opensuse · tumbleweed
[gtk3-immodule-vietnamese]Unknown
Source package: [gtk3]
Details (1)
- 3.24.52-2.2 · x86_64 · tumbleweed
  Unknown · Fixed: 2.14.2-2.1
  Version impact unknown
  pypi · gtk3 · opensuse · tumbleweed
[gtk3-immodule-vietnamese-32bit]Unknown
Source package: [gtk3]
Details (1)
- 3.24.52-2.2 · x86_64 · tumbleweed
  Unknown · Fixed: 2.14.2-2.1
  Version impact unknown
  pypi · gtk3 · opensuse · tumbleweed
[gtk3-immodule-xim]Unknown
Source package: [gtk3]
Details (1)
- 3.24.52-2.2 · x86_64 · tumbleweed
  Unknown · Fixed: 2.14.2-2.1
  Version impact unknown
  pypi · gtk3 · opensuse · tumbleweed

Next results

Observed: Oct 23, 2026, 5:19:32 PM UTC

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]