CVE catalog

CVE-2024-43097

firefox-esr: CVE-2024-43097

Severity: High · CVSS 8.8CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Published: Dec 1, 2024, 12:00:00 AM UTC
Source: [NVD] · [CVE record]
EPSS: 0.36% · Oct 25, 2026

In resizeToAtLeast of SkRegion.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	wpewebkit	sid	`2.54.2-1`	fixed
Debian	wpewebkit	forky	`2.54.1-1`	fixed
Debian	wpewebkit	trixie	`2.48.3-1`	vulnerable
Debian	wpewebkit	bookworm	`2.38.6-1`	vulnerable
Debian	webkit2gtk	sid	`2.54.2-2`	fixed
Debian	webkit2gtk	forky	`2.52.6-1`	vulnerable
Debian	webkit2gtk	trixie	`2.52.6-1~deb13u1`	vulnerable
Debian	webkit2gtk	trixie-security	`2.54.0-1~deb13u3`	fixed
Debian	webkit2gtk	bookworm	`2.50.6-1~deb12u2`	vulnerable
Debian	webkit2gtk	bookworm-security	`2.50.6-1~deb12u1`	vulnerable
Debian	firefox-esr	sid	`153.5.1esr-1`	fixed
Debian	firefox-esr	forky	`153.5.1esr-1`	fixed
Debian	firefox-esr	trixie	`140.15.0esr-1~deb13u1`	fixed
Debian	firefox-esr	trixie-security	`153.5.1esr-1~deb13u1`	fixed
Debian	firefox-esr	bookworm	`140.12.0esr-1~deb12u1`	fixed
Debian	firefox-esr	bookworm-security	`153.5.1esr-1~deb12u1`	fixed
Debian	thunderbird	sid	`1:153.5.1esr-1`	fixed
Debian	thunderbird	forky	`1:153.5.0esr-1`	fixed
Debian	thunderbird	trixie	`1:140.12.0esr-1~deb13u1`	fixed
Debian	thunderbird	trixie-security	`1:153.5.1esr-1~deb13u2`	fixed
Debian	thunderbird	bookworm	`1:140.12.0esr-1~deb12u1`	fixed
Debian	thunderbird	bookworm-security	`1:153.5.1esr-1~deb12u1`	fixed
Android	platform/external/skia	Not reported	`14`	vulnerable
Android	platform/external/skia	Not reported	`14:2024-12-01`	fixed
Ubuntu	thunderbird	22.04	`1:91.1.2+build1-0ubuntu1`	vulnerable
Ubuntu	thunderbird	22.04	`1:91.3.0+build2-0ubuntu1`	vulnerable
Ubuntu	thunderbird	22.04	`1:91.3.1+build1-0ubuntu1`	vulnerable
Ubuntu	thunderbird	22.04	`1:91.3.2+build1-0ubuntu1`	vulnerable
Ubuntu	thunderbird	22.04	`1:91.4.0+build1.1-0ubuntu1`	vulnerable
Ubuntu	thunderbird	22.04	`1:91.4.0+build2-0ubuntu1`	vulnerable
Ubuntu	thunderbird	22.04	`1:91.5.0+build1-0ubuntu1`	vulnerable
Ubuntu	thunderbird	22.04	`1:91.5.1+build1-0ubuntu1`	vulnerable
Ubuntu	thunderbird	22.04	`1:91.6.1+build1-0ubuntu1`	vulnerable
Ubuntu	thunderbird	22.04	`1:91.7.0+build1-0ubuntu1`	vulnerable
Ubuntu	thunderbird	22.04	`1:91.7.0+build2-0ubuntu1`	vulnerable
Ubuntu	thunderbird	22.04	`1:91.8.0+build2-0ubuntu1`	vulnerable
Ubuntu	thunderbird	22.04	`1:91.9.1+build1-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:91.11.0+build2-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:102.2.2+build1-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:102.4.2+build2-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:102.7.1+build2-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:102.8.0+build2-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:102.9.0+build1-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:102.10.0+build2-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:102.11.0+build1-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:102.13.0+build1-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:102.15.0+build1-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:102.15.1+build1-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:115.3.1+build1-0ubuntu0.22.04.2`	vulnerable
Ubuntu	thunderbird	22.04	`1:115.4.1+build1-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:115.5.0+build1-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:115.6.0+build2-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:115.8.1+build1-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:115.9.0+build1-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:115.10.1+build1-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:115.11.0+build2-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:115.12.0+build3-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:115.13.0+build5-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:115.15.0+build1-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:115.16.0+build2-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:115.18.0+build1-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:128.12.0+build1-0ubuntu0.22.04.1`	fixed
Ubuntu	thunderbird	22.04	`1:91.1.2+build1-0ubuntu1`	vulnerable
Ubuntu	thunderbird	22.04	`1:91.3.0+build2-0ubuntu1`	vulnerable
Ubuntu	thunderbird	22.04	`1:91.3.1+build1-0ubuntu1`	vulnerable
Ubuntu	thunderbird	22.04	`1:91.3.2+build1-0ubuntu1`	vulnerable
Ubuntu	thunderbird	22.04	`1:91.4.0+build1.1-0ubuntu1`	vulnerable
Ubuntu	thunderbird	22.04	`1:91.4.0+build2-0ubuntu1`	vulnerable
Ubuntu	thunderbird	22.04	`1:91.5.0+build1-0ubuntu1`	vulnerable
Ubuntu	thunderbird	22.04	`1:91.5.1+build1-0ubuntu1`	vulnerable
Ubuntu	thunderbird	22.04	`1:91.6.1+build1-0ubuntu1`	vulnerable
Ubuntu	thunderbird	22.04	`1:91.7.0+build1-0ubuntu1`	vulnerable
Ubuntu	thunderbird	22.04	`1:91.7.0+build2-0ubuntu1`	vulnerable
Ubuntu	thunderbird	22.04	`1:91.8.0+build2-0ubuntu1`	vulnerable
Ubuntu	thunderbird	22.04	`1:91.9.1+build1-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:91.11.0+build2-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:102.2.2+build1-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:102.4.2+build2-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:102.7.1+build2-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:102.8.0+build2-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:102.9.0+build1-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:102.10.0+build2-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:102.11.0+build1-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:102.13.0+build1-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:102.15.0+build1-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:102.15.1+build1-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:115.3.1+build1-0ubuntu0.22.04.2`	vulnerable
Ubuntu	thunderbird	22.04	`1:115.4.1+build1-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:115.5.0+build1-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:115.6.0+build2-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:115.8.1+build1-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:115.9.0+build1-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:115.10.1+build1-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:115.11.0+build2-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:115.12.0+build3-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:115.13.0+build5-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:115.15.0+build1-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:115.16.0+build2-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:115.18.0+build1-0ubuntu0.22.04.1`	vulnerable
Ubuntu	thunderbird	22.04	`1:128.12.0+build1-0ubuntu0.22.04.1`	fixed
Opensuse	mozjs128	tumbleweed	`128.8.1-1.1`	fixed
Suse	MozillaThunderbird	linux enterprise module for package hub 15 sp6	`128.8.0-150200.8.203.1`	fixed
Suse	MozillaThunderbird	linux enterprise workstation extension 15 sp6	`128.8.0-150200.8.203.1`	fixed
Opensuse	MozillaThunderbird	leap 15.6	`128.8.0-150200.8.203.1`	fixed
Suse	MozillaFirefox	linux enterprise module for desktop applications 15 sp6	`128.8.0-150200.152.173.1`	fixed
Suse	MozillaFirefox	linux enterprise high performance computing 15 sp3-ltss	`128.8.0-150200.152.173.1`	fixed
Suse	MozillaFirefox	linux enterprise high performance computing 15 sp4-espos	`128.8.0-150200.152.173.1`	fixed
Suse	MozillaFirefox	linux enterprise high performance computing 15 sp4-ltss	`128.8.0-150200.152.173.1`	fixed
Suse	MozillaFirefox	linux enterprise high performance computing 15 sp5-espos	`128.8.0-150200.152.173.1`	fixed
Suse	MozillaFirefox	linux enterprise high performance computing 15 sp5-ltss	`128.8.0-150200.152.173.1`	fixed
Suse	MozillaFirefox	linux enterprise server 15 sp3-ltss	`128.8.0-150200.152.173.1`	fixed
Suse	MozillaFirefox	linux enterprise server 15 sp4-ltss	`128.8.0-150200.152.173.1`	fixed
Suse	MozillaFirefox	linux enterprise server 15 sp5-ltss	`128.8.0-150200.152.173.1`	fixed
Suse	MozillaFirefox	linux enterprise server for sap applications 15 sp3	`128.8.0-150200.152.173.1`	fixed
Suse	MozillaFirefox	linux enterprise server for sap applications 15 sp4	`128.8.0-150200.152.173.1`	fixed
Suse	MozillaFirefox	linux enterprise server for sap applications 15 sp5	`128.8.0-150200.152.173.1`	fixed
Suse	MozillaFirefox	enterprise storage 7.1	`128.8.0-150200.152.173.1`	fixed
Opensuse	MozillaFirefox	leap 15.6	`128.8.0-150200.152.173.1`	fixed
Opensuse	firefox-esr	tumbleweed	`128.8.0-1.1`	fixed
Suse	MozillaFirefox	linux enterprise server 12 sp5-ltss	`128.8.0-112.249.3`	fixed
Suse	MozillaFirefox	linux enterprise server ltss extended security 12 sp5	`128.8.0-112.249.3`	fixed
Opensuse	MozillaThunderbird	tumbleweed	`128.8.0-1.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	wpewebkit	source	sid	`2.54.0-1`	not yet assigned	Not reported	Not reported
Debian	wpewebkit	source	forky	`2.54.0-1`	not yet assigned	Not reported	Not reported
Debian	wpewebkit	source	trixie	`(unfixed)`	not yet assigned	Not reported	Not reported
Debian	wpewebkit	source	bookworm	`(unfixed)`	not yet assigned	Not reported	Not reported
Debian	webkit2gtk	source	sid	`2.54.0-1`	not yet assigned	Not reported	Not reported
Debian	webkit2gtk	source	forky	`(unfixed)`	not yet assigned	Not reported	Not reported
Debian	webkit2gtk	source	trixie	`2.54.0-1~deb13u1`	not yet assigned	Not reported	Not reported
Debian	webkit2gtk	source	bookworm	`(unfixed)`	end-of-life	Not reported	Not reported
Debian	firefox-esr	source	sid	`128.8.0esr-1`	not yet assigned	Not reported	Not reported
Debian	firefox-esr	source	forky	`128.8.0esr-1`	not yet assigned	Not reported	Not reported
Debian	firefox-esr	source	trixie	`128.8.0esr-1`	not yet assigned	Not reported	Not reported
Debian	firefox-esr	source	bookworm	`128.8.0esr-1~deb12u1`	not yet assigned	Not reported	Not reported
Debian	thunderbird	source	sid	`1:128.8.0esr-1`	not yet assigned	Not reported	Not reported
Debian	thunderbird	source	forky	`1:128.8.0esr-1`	not yet assigned	Not reported	Not reported
Debian	thunderbird	source	trixie	`1:128.8.0esr-1`	not yet assigned	Not reported	Not reported
Debian	thunderbird	source	bookworm	`1:128.8.0esr-1~deb12u1`	not yet assigned	Not reported	Not reported
Android	platform/external/skia	Android	Not reported	`14:2024-12-01`	Not reported	ASB-A-350118416	Not reported
Ubuntu	thunderbird	deb	22.04	`1:128.12.0+build1-0ubuntu0.22.04.1`	Not reported	USN-7663-1	Not reported
Ubuntu	thunderbird	deb	22.04	`1:128.12.0+build1-0ubuntu0.22.04.1`	Not reported	UBUNTU-CVE-2024-43097	Not reported
Opensuse	mozjs128	rpm	tumbleweed	`128.8.1-1.1`	Not reported	OPENSUSE-SU-2025:14958-1	Not reported
Suse	MozillaThunderbird	rpm	linux enterprise module for package hub 15 sp6	`128.8.0-150200.8.203.1`	Not reported	SUSE-SU-2025:0849-1	Not reported
Suse	MozillaThunderbird	rpm	linux enterprise workstation extension 15 sp6	`128.8.0-150200.8.203.1`	Not reported	SUSE-SU-2025:0849-1	Not reported
Opensuse	MozillaThunderbird	rpm	leap 15.6	`128.8.0-150200.8.203.1`	Not reported	SUSE-SU-2025:0849-1	Not reported
Suse	MozillaFirefox	rpm	linux enterprise module for desktop applications 15 sp6	`128.8.0-150200.152.173.1`	Not reported	SUSE-SU-2025:0788-1	Not reported
Suse	MozillaFirefox	rpm	linux enterprise high performance computing 15 sp3-ltss	`128.8.0-150200.152.173.1`	Not reported	SUSE-SU-2025:0788-1	Not reported
Suse	MozillaFirefox	rpm	linux enterprise high performance computing 15 sp4-espos	`128.8.0-150200.152.173.1`	Not reported	SUSE-SU-2025:0788-1	Not reported
Suse	MozillaFirefox	rpm	linux enterprise high performance computing 15 sp4-ltss	`128.8.0-150200.152.173.1`	Not reported	SUSE-SU-2025:0788-1	Not reported
Suse	MozillaFirefox	rpm	linux enterprise high performance computing 15 sp5-espos	`128.8.0-150200.152.173.1`	Not reported	SUSE-SU-2025:0788-1	Not reported
Suse	MozillaFirefox	rpm	linux enterprise high performance computing 15 sp5-ltss	`128.8.0-150200.152.173.1`	Not reported	SUSE-SU-2025:0788-1	Not reported
Suse	MozillaFirefox	rpm	linux enterprise server 15 sp3-ltss	`128.8.0-150200.152.173.1`	Not reported	SUSE-SU-2025:0788-1	Not reported
Suse	MozillaFirefox	rpm	linux enterprise server 15 sp4-ltss	`128.8.0-150200.152.173.1`	Not reported	SUSE-SU-2025:0788-1	Not reported
Suse	MozillaFirefox	rpm	linux enterprise server 15 sp5-ltss	`128.8.0-150200.152.173.1`	Not reported	SUSE-SU-2025:0788-1	Not reported
Suse	MozillaFirefox	rpm	linux enterprise server for sap applications 15 sp3	`128.8.0-150200.152.173.1`	Not reported	SUSE-SU-2025:0788-1	Not reported
Suse	MozillaFirefox	rpm	linux enterprise server for sap applications 15 sp4	`128.8.0-150200.152.173.1`	Not reported	SUSE-SU-2025:0788-1	Not reported
Suse	MozillaFirefox	rpm	linux enterprise server for sap applications 15 sp5	`128.8.0-150200.152.173.1`	Not reported	SUSE-SU-2025:0788-1	Not reported
Suse	MozillaFirefox	rpm	enterprise storage 7.1	`128.8.0-150200.152.173.1`	Not reported	SUSE-SU-2025:0788-1	Not reported
Opensuse	MozillaFirefox	rpm	leap 15.6	`128.8.0-150200.152.173.1`	Not reported	SUSE-SU-2025:0788-1	Not reported
Opensuse	firefox-esr	rpm	tumbleweed	`128.8.0-1.1`	Not reported	OPENSUSE-SU-2025:14852-1	Not reported
Suse	MozillaFirefox	rpm	linux enterprise server 12 sp5-ltss	`128.8.0-112.249.3`	Not reported	SUSE-SU-2025:0783-1	Not reported
Suse	MozillaFirefox	rpm	linux enterprise server ltss extended security 12 sp5	`128.8.0-112.249.3`	Not reported	SUSE-SU-2025:0783-1	Not reported
Opensuse	MozillaThunderbird	rpm	tumbleweed	`128.8.0-1.1`	Not reported	OPENSUSE-SU-2025:14853-1	Not reported

Notes

[trixie] wpewebkit: wpewebkit not covered by security support in Trixie [bookworm] wpewebkit: wpewebkit not covered by security support in Bookworm

OpenFactory catalog packages

[Debian 12 (Bookworm)]

[gir1.2-javascriptcoregtk-4.0]Affected
Source package: [webkit2gtk]
Details (6)
- 2.50.6-1~deb12u2 · amd64 · bookworm
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u2 · arm64 · bookworm
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · amd64 · bookworm-backports
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · arm64 · bookworm-backports
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · amd64 · bookworm-security
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · arm64 · bookworm-security
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
[gir1.2-javascriptcoregtk-4.1]Affected
Source package: [webkit2gtk]
Details (6)
- 2.50.6-1~deb12u2 · amd64 · bookworm
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u2 · arm64 · bookworm
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · amd64 · bookworm-backports
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · arm64 · bookworm-backports
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · amd64 · bookworm-security
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · arm64 · bookworm-security
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
[gir1.2-javascriptcoregtk-6.0]Affected
Source package: [webkit2gtk]
Details (6)
- 2.50.6-1~deb12u2 · amd64 · bookworm
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u2 · arm64 · bookworm
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · amd64 · bookworm-backports
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · arm64 · bookworm-backports
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · amd64 · bookworm-security
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · arm64 · bookworm-security
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
[gir1.2-webkit2-4.0]Affected
Source package: [webkit2gtk]
Details (6)
- 2.50.6-1~deb12u2 · amd64 · bookworm
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u2 · arm64 · bookworm
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · amd64 · bookworm-backports
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · arm64 · bookworm-backports
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · amd64 · bookworm-security
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · arm64 · bookworm-security
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
[gir1.2-webkit2-4.1]Affected
Source package: [webkit2gtk]
Details (6)
- 2.50.6-1~deb12u2 · amd64 · bookworm
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u2 · arm64 · bookworm
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · amd64 · bookworm-backports
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · arm64 · bookworm-backports
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · amd64 · bookworm-security
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · arm64 · bookworm-security
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
[gir1.2-webkit-6.0]Affected
Source package: [webkit2gtk]
Details (6)
- 2.50.6-1~deb12u2 · amd64 · bookworm
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u2 · arm64 · bookworm
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · amd64 · bookworm-backports
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · arm64 · bookworm-backports
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · amd64 · bookworm-security
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · arm64 · bookworm-security
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
[libjavascriptcoregtk-4.0-18]Affected
Source package: [webkit2gtk]
Details (6)
- 2.50.6-1~deb12u2 · amd64 · bookworm
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u2 · arm64 · bookworm
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · amd64 · bookworm-backports
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · arm64 · bookworm-backports
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · amd64 · bookworm-security
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · arm64 · bookworm-security
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
[libjavascriptcoregtk-4.0-bin]Affected
Source package: [webkit2gtk]
Details (6)
- 2.50.6-1~deb12u2 · amd64 · bookworm
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u2 · arm64 · bookworm
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · amd64 · bookworm-backports
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · arm64 · bookworm-backports
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · amd64 · bookworm-security
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · arm64 · bookworm-security
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
[libjavascriptcoregtk-4.0-dev]Affected
Source package: [webkit2gtk]
Details (6)
- 2.50.6-1~deb12u2 · amd64 · bookworm
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u2 · arm64 · bookworm
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · amd64 · bookworm-backports
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · arm64 · bookworm-backports
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · amd64 · bookworm-security
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · arm64 · bookworm-security
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
[libjavascriptcoregtk-4.1-0]Affected
Source package: [webkit2gtk]
Details (6)
- 2.50.6-1~deb12u2 · amd64 · bookworm
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u2 · arm64 · bookworm
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · amd64 · bookworm-backports
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · arm64 · bookworm-backports
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · amd64 · bookworm-security
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · arm64 · bookworm-security
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
[libjavascriptcoregtk-4.1-dev]Affected
Source package: [webkit2gtk]
Details (6)
- 2.50.6-1~deb12u2 · amd64 · bookworm
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u2 · arm64 · bookworm
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · amd64 · bookworm-backports
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · arm64 · bookworm-backports
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · amd64 · bookworm-security
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · arm64 · bookworm-security
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
[libjavascriptcoregtk-6.0-1]Affected
Source package: [webkit2gtk]
Details (6)
- 2.50.6-1~deb12u2 · amd64 · bookworm
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u2 · arm64 · bookworm
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · amd64 · bookworm-backports
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · arm64 · bookworm-backports
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · amd64 · bookworm-security
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · arm64 · bookworm-security
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
[libjavascriptcoregtk-6.0-dev]Affected
Source package: [webkit2gtk]
Details (6)
- 2.50.6-1~deb12u2 · amd64 · bookworm
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u2 · arm64 · bookworm
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · amd64 · bookworm-backports
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · arm64 · bookworm-backports
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · amd64 · bookworm-security
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · arm64 · bookworm-security
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
[libwebkit2gtk-4.0-37]Affected
Source package: [webkit2gtk]
Details (6)
- 2.50.6-1~deb12u2 · amd64 · bookworm
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u2 · arm64 · bookworm
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · amd64 · bookworm-backports
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · arm64 · bookworm-backports
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · amd64 · bookworm-security
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · arm64 · bookworm-security
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
[libwebkit2gtk-4.0-dev]Affected
Source package: [webkit2gtk]
Details (6)
- 2.50.6-1~deb12u2 · amd64 · bookworm
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u2 · arm64 · bookworm
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · amd64 · bookworm-backports
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · arm64 · bookworm-backports
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · amd64 · bookworm-security
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · arm64 · bookworm-security
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
[libwebkit2gtk-4.0-doc]Affected
Source package: [webkit2gtk]
Details (6)
- 2.50.6-1~deb12u2 · all · bookworm
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u2 · all · bookworm
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · all · bookworm-backports
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · all · bookworm-backports
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · all · bookworm-security
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · all · bookworm-security
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
[libwebkit2gtk-4.1-0]Affected
Source package: [webkit2gtk]
Details (6)
- 2.50.6-1~deb12u2 · amd64 · bookworm
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u2 · arm64 · bookworm
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · amd64 · bookworm-backports
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · arm64 · bookworm-backports
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · amd64 · bookworm-security
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · arm64 · bookworm-security
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
[libwebkit2gtk-4.1-dev]Affected
Source package: [webkit2gtk]
Details (6)
- 2.50.6-1~deb12u2 · amd64 · bookworm
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u2 · arm64 · bookworm
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · amd64 · bookworm-backports
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · arm64 · bookworm-backports
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · amd64 · bookworm-security
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · arm64 · bookworm-security
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
[libwebkitgtk-6.0-4]Affected
Source package: [webkit2gtk]
Details (6)
- 2.50.6-1~deb12u2 · amd64 · bookworm
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u2 · arm64 · bookworm
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · amd64 · bookworm-backports
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · arm64 · bookworm-backports
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · amd64 · bookworm-security
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · arm64 · bookworm-security
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
[libwebkitgtk-6.0-dev]Affected
Source package: [webkit2gtk]
Details (6)
- 2.50.6-1~deb12u2 · amd64 · bookworm
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u2 · arm64 · bookworm
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · amd64 · bookworm-backports
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.46.1-2~bpo12+1 · arm64 · bookworm-backports
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · amd64 · bookworm-security
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12
- 2.50.6-1~deb12u1 · arm64 · bookworm-security
  Affected
  dsa · webkit2gtk · debian · bookworm; dsa · webkit2gtk · debian · 12

Next results

Observed: Oct 27, 2026, 7:33:03 PM UTC

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]