CVE-2023-25358: fedoraproject fedora Use After Free

CVSS: 8.8v3.1HighModified

AliasesUBUNTU-CVE-2023-25358DEBIAN-CVE-2023-25358

Published 02-03-2023Last modified 07-03-2025

Vulnerability summary

CVE-2023-25358 is a high (CVSS 8.8) Use After Free vulnerability in fedoraproject fedora. EPSS estimates a 1.06% chance of exploitation in the next 30 days, higher than 64% of scored vulnerabilities.

Overall risk

35/100

0100

Medium · default modelHow is this calculated?

CVSS score

8.8/10

010

High · v3.1 (CVE.org)

EPSS score

1.06%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 12 · Related 5

DLA-3124-1 DSA-5240-1 DSA-5241-1 MGASA-2023-0177 RHSA-2023:2256 RHSA-2023:2834+6 more

Timeline

02-03-2023
PublishedVulnerability first disclosed.
07-03-2025
Last modifiedVulnerability information updated.

Description

A use-after-free vulnerability in WebCore::RenderLayer::addChild in WebKitGTK before 2.36.8 allows attackers to execute code remotely.

CVSS metrics

4 scores · 4 sources · 1 version

v3.18.8

EPSS trend

Probability

1.06%

Chance of exploitation in the next 30 days

Percentile

64%

Versus all other CVEs

30-day change

0.00 pp

From 1.06% on 19-09-2026

19-09-202619-10-2026

EPSS score

1.06%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-416Use After FreeThe product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

Affected systems

Ubuntu5 products

qtwebkit-opensource-srcAll versions (No fix recorded)
qtwebkit-sourceAll versions (No fix recorded)
webkit2gtkAll versions (No fix recorded) | < 2.38.6-0ubuntu0.20.04.1 | < 2.38.6-0ubuntu0.22.04.1
webkitgtkAll versions (No fix recorded)
wpewebkitAll versions (No fix recorded)

Debian2 products