webkitgtk: Memory corruption may lead to arbitrary code execution

A memory corruption issue was found in webkitgtk that affected WebKitGTK versions before 2.28.3 and WPE WebKit versions before 2.28.3. This flaw allows an attacker to process maliciously crafted web content that may lead to arbitrary code execution. The highest threat from this vulnerability is t...

webkitgtk: webkit2gtk: Use-after-free was addressed with improved memory management

A flaw was found in WebKitGTK. Processing malicious web content can trigger a use-after-free issue due to improper bounds checking, causing an unexpected process crash, resulting in a denial of service...

webkitgtk: Type confusion issue leading to arbitrary code execution

A type confusion vulnerability was found in WebKitGTK and WPE WebKit in versions prior to 2.30.6. Processing maliciously crafted web content may lead to arbitrary code execution. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

Vulnerability of the ath11k_wmi_gtk_offload_status_event() function in the drivers/net/wireless/ath/ath11k/wmi.c module – The wireless adapter support driver from Atheros/Qualcomm in the Linux operating system allows a hacker to induce a service failure.

Vulnerability of the ath11kwmigtkoffloadstatusevent function in the drivers/net/wireless/ath/ath11k/wmi.c module – The wireless adapter support driver from Atheros/Qualcomm in Linux operating systems is vulnerable due to the reutilization of previously freed memory. Exploiting this vulnerability...

GLSA-202506-05 : GTK+ 3: Search path vulnerability

The remote host is affected by the vulnerability described in GLSA-202506-05 GTK+ 3: Search path vulnerability A vulnerability has been discovered in GTK+ 3. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly from the...

TencentOS Server 4: gtk3 (TSSA-2024:0495)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0495 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

TencentOS Server 3: gtk3 (TSSA-2024:0515)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0515 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

GTK+ 3: Search path vulnerability

Background GTK+ GIMP Toolkit + is a toolkit for creating graphical user interfaces. Description A vulnerability has been discovered in GTK+ 3. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifier for details. Workaround There is no kno...

[SECURITY] Fedora 42 Update: mingw-libsoup-2.74.3-12.fc42

Libsoup is an HTTP library implementation in C. It was originally part of a SOAP Simple Object Access Protocol implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications...

[SECURITY] Fedora 41 Update: emacs-30.1-5.fc41

GNU Emacs is a powerful, customizable, self-documenting, modeless text editor. It contains special code editing features, a scripting language elisp, and the capability to read mail, news, and more without leaving the editor. This package provides an emacs binary with support for Wayland, using t...

CVE-2023-28581

Memory corruption in WLAN Firmware while parsing receieved GTK Keys in GTK KDE...

CVE-2010-4831

Untrusted search path vulnerability in gdk/win32/gdkinput-win32.c in GTK+ before 2.21.8 allows local users to gain privileges via a Trojan horse Wintab32.dll file in the current working directory...

CVE-2019-14114

Buffer overflow in WLAN firmware while parsing GTK IE containing GTK key having length more than the buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT,...

CVE-2011-2922

ktsuss versions 1.4 and prior spawns the GTK interface to run as root. This can allow a local attacker to escalate privileges to root and use the "GTKMODULES" environment variable to possibly execute arbitrary code...

CVE-2017-1000121

The UNIX IPC layer in WebKit, including WebKitGTK+ prior to 2.16.3, does not properly validate message size metadata, allowing a compromised secondary process to trigger an integer overflow and subsequent buffer overflow in the UI process. This vulnerability does not affect Apple products...

[SECURITY] Fedora 42 Update: webkitgtk-2.48.2-1.fc42

WebKitGTK is the port of the WebKit web rendering engine to the GTK platform...

Alibaba Cloud Linux 3 : 0253: gtk3 (ALINUX3-SA-2024:0253)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2024:0253 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2024-6655: A flaw was found in the GTK library...

[SECURITY] Fedora 41 Update: deluge-2.2.0-1.fc41

Deluge is a new BitTorrent client, created using Python and GTK+. It is intended to bring a native, full-featured client to Linux GTK+ desktop environments such as GNOME and XFCE. It supports features such as DHT Distributed Hash Tables, PEX =C2=B5Torrent-compatible Peer Exchange, and UPnP...

[SECURITY] Fedora 42 Update: deluge-2.2.0-1.fc42

Deluge is a new BitTorrent client, created using Python and GTK+. It is intended to bring a native, full-featured client to Linux GTK+ desktop environments such as GNOME and XFCE. It supports features such as DHT Distributed Hash Tables, PEX =C2=B5Torrent-compatible Peer Exchange, and UPnP...

gtk-vnc bug fix and enhancement update

An update is available for gtk-vnc. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9.4...