Memory corruption in WPE WebKit and WebKitGTK+ - CVE-2026-28984

Vulnerability identifier: #VU143975

CSH Severity: Low

CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-28984

CWE-ID: CWE-119

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary error in WebKit. A remote attacker can trick the victim into opening a specially crafted file and perform an unexpected Safari crash.

WPE WebKit
WebKitGTK+
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Desktop 15
Basesystem Module
Desktop Applications Module
Development Tools Module
openSUSE Leap
iPadOS
Apple iOS
Ubuntu
webkit2gtk (Ubuntu package)
webkit2gtk3-soup2-devel
libjavascriptcoregtk-4_1-0-32bit
libwebkit2gtk-4_1-0-32bit
libjavascriptcoregtk-4_1-0-32bit-debuginfo
typelib-1_0-JavaScriptCore-4_1
typelib-1_0-WebKitWebProcessExtension-6_0
webkit2gtk-4_0-injected-bundles-debuginfo
libjavascriptcoregtk-6_0-1-debuginfo
webkit2gtk-4_1-injected-bundles-debuginfo
libjavascriptcoregtk-4_0-18
libwebkit2gtk-4_0-37-32bit
webkit-jsc-4.1
webkit2gtk3-debugsource
webkit2gtk4-debugsource
webkitgtk-6_0-injected-bundles
libwebkit2gtk-4_0-37
webkit-jsc-6.0
libwebkit2gtk-4_0-37-32bit-debuginfo
typelib-1_0-WebKit2WebExtension-4_0
libwebkit2gtk-4_1-0-32bit-debuginfo
libjavascriptcoregtk-4_0-18-32bit-debuginfo
libjavascriptcoregtk-4_0-18-32bit
WebKitGTK-4.1-lang
WebKitGTK-4.0-lang
WebKitGTK-6.0-lang
libwebkit2gtk-4_1-0-64bit
libwebkit2gtk-4_0-37-64bit-debuginfo
libjavascriptcoregtk-4_0-18-64bit
libwebkit2gtk-4_1-0-64bit-debuginfo
libjavascriptcoregtk-4_1-0-64bit-debuginfo
libwebkit2gtk-4_0-37-64bit
libjavascriptcoregtk-4_0-18-64bit-debuginfo
libjavascriptcoregtk-4_1-0-64bit
webkit-jsc-4-debuginfo
webkitgtk-6_0-injected-bundles-debuginfo
typelib-1_0-WebKit2-4_0
libjavascriptcoregtk-4_1-0
typelib-1_0-JavaScriptCore-4_0
typelib-1_0-JavaScriptCore-6_0
webkit2gtk3-soup2-debugsource
libjavascriptcoregtk-4_0-18-debuginfo
libwebkit2gtk-4_0-37-debuginfo
webkit-jsc-4.1-debuginfo
typelib-1_0-WebKit2-4_1
libwebkit2gtk-4_1-0
webkit2gtk4-minibrowser
webkit2gtk3-soup2-minibrowser-debuginfo
webkit2gtk4-minibrowser-debuginfo
typelib-1_0-WebKit-6_0
webkit2gtk3-minibrowser-debuginfo
webkit2gtk3-minibrowser
webkit2gtk4-devel
typelib-1_0-WebKit2WebExtension-4_1
libwebkit2gtk-4_1-0-debuginfo
libwebkitgtk-6_0-4
webkit2gtk3-devel
webkit2gtk-4_0-injected-bundles
webkit2gtk-4_1-injected-bundles
webkit-jsc-6.0-debuginfo
webkit-jsc-4
libjavascriptcoregtk-6_0-1
libjavascriptcoregtk-4_1-0-debuginfo
libwebkitgtk-6_0-4-debuginfo
webkit2gtk3-soup2-minibrowser

Install update from vendor's website.

WPE WebKit - update to 2.52.4
WebKitGTK+ - update to 2.52.4
iPadOS - update to 18.7.10 22H374
Apple iOS - update to 18.7.10 22H374
webkit2gtk (Ubuntu package) - addressed in versions 2.52.6-0ubuntu0.24.04.1, 2.52.6-0ubuntu0.26.04.1
webkit2gtk3-soup2-devel - update to 2.52.6-150600.12.74.1
libjavascriptcoregtk-4_1-0-32bit - update to 2.52.6-150600.12.74.1
libwebkit2gtk-4_1-0-32bit - update to 2.52.6-150600.12.74.1
libjavascriptcoregtk-4_1-0-32bit-debuginfo - update to 2.52.6-150600.12.74.1
typelib-1_0-JavaScriptCore-4_1 - update to 2.52.6-150600.12.74.1
typelib-1_0-WebKitWebProcessExtension-6_0 - update to 2.52.6-150600.12.74.1
webkit2gtk-4_0-injected-bundles-debuginfo - update to 2.52.6-150600.12.74.1
libjavascriptcoregtk-6_0-1-debuginfo - update to 2.52.6-150600.12.74.1
webkit2gtk-4_1-injected-bundles-debuginfo - update to 2.52.6-150600.12.74.1
libjavascriptcoregtk-4_0-18 - update to 2.52.6-150600.12.74.1
libwebkit2gtk-4_0-37-32bit - update to 2.52.6-150600.12.74.1
webkit-jsc-4.1 - update to 2.52.6-150600.12.74.1
webkit2gtk3-debugsource - update to 2.52.6-150600.12.74.1
webkit2gtk4-debugsource - update to 2.52.6-150600.12.74.1
webkitgtk-6_0-injected-bundles - update to 2.52.6-150600.12.74.1
libwebkit2gtk-4_0-37 - update to 2.52.6-150600.12.74.1
webkit-jsc-6.0 - update to 2.52.6-150600.12.74.1
libwebkit2gtk-4_0-37-32bit-debuginfo - update to 2.52.6-150600.12.74.1
typelib-1_0-WebKit2WebExtension-4_0 - update to 2.52.6-150600.12.74.1
libwebkit2gtk-4_1-0-32bit-debuginfo - update to 2.52.6-150600.12.74.1
libjavascriptcoregtk-4_0-18-32bit-debuginfo - update to 2.52.6-150600.12.74.1
libjavascriptcoregtk-4_0-18-32bit - update to 2.52.6-150600.12.74.1
WebKitGTK-4.1-lang - update to 2.52.6-150600.12.74.1
WebKitGTK-4.0-lang - update to 2.52.6-150600.12.74.1
WebKitGTK-6.0-lang - update to 2.52.6-150600.12.74.1
libwebkit2gtk-4_1-0-64bit - update to 2.52.6-150600.12.74.1
libwebkit2gtk-4_0-37-64bit-debuginfo - update to 2.52.6-150600.12.74.1
libjavascriptcoregtk-4_0-18-64bit - update to 2.52.6-150600.12.74.1
libwebkit2gtk-4_1-0-64bit-debuginfo - update to 2.52.6-150600.12.74.1
libjavascriptcoregtk-4_1-0-64bit-debuginfo - update to 2.52.6-150600.12.74.1
libwebkit2gtk-4_0-37-64bit - update to 2.52.6-150600.12.74.1
libjavascriptcoregtk-4_0-18-64bit-debuginfo - update to 2.52.6-150600.12.74.1
libjavascriptcoregtk-4_1-0-64bit - update to 2.52.6-150600.12.74.1
webkit-jsc-4-debuginfo - update to 2.52.6-150600.12.74.1
webkitgtk-6_0-injected-bundles-debuginfo - update to 2.52.6-150600.12.74.1
typelib-1_0-WebKit2-4_0 - update to 2.52.6-150600.12.74.1
libjavascriptcoregtk-4_1-0 - update to 2.52.6-150600.12.74.1
typelib-1_0-JavaScriptCore-4_0 - update to 2.52.6-150600.12.74.1
typelib-1_0-JavaScriptCore-6_0 - update to 2.52.6-150600.12.74.1
webkit2gtk3-soup2-debugsource - update to 2.52.6-150600.12.74.1
libjavascriptcoregtk-4_0-18-debuginfo - update to 2.52.6-150600.12.74.1
libwebkit2gtk-4_0-37-debuginfo - update to 2.52.6-150600.12.74.1
webkit-jsc-4.1-debuginfo - update to 2.52.6-150600.12.74.1
typelib-1_0-WebKit2-4_1 - update to 2.52.6-150600.12.74.1
libwebkit2gtk-4_1-0 - update to 2.52.6-150600.12.74.1
webkit2gtk4-minibrowser - update to 2.52.6-150600.12.74.1
webkit2gtk3-soup2-minibrowser-debuginfo - update to 2.52.6-150600.12.74.1
webkit2gtk4-minibrowser-debuginfo - update to 2.52.6-150600.12.74.1
typelib-1_0-WebKit-6_0 - update to 2.52.6-150600.12.74.1
webkit2gtk3-minibrowser-debuginfo - update to 2.52.6-150600.12.74.1
webkit2gtk3-minibrowser - update to 2.52.6-150600.12.74.1
webkit2gtk4-devel - update to 2.52.6-150600.12.74.1
typelib-1_0-WebKit2WebExtension-4_1 - update to 2.52.6-150600.12.74.1
libwebkit2gtk-4_1-0-debuginfo - update to 2.52.6-150600.12.74.1
libwebkitgtk-6_0-4 - update to 2.52.6-150600.12.74.1
webkit2gtk3-devel - update to 2.52.6-150600.12.74.1
webkit2gtk-4_0-injected-bundles - update to 2.52.6-150600.12.74.1
webkit2gtk-4_1-injected-bundles - update to 2.52.6-150600.12.74.1
webkit-jsc-6.0-debuginfo - update to 2.52.6-150600.12.74.1
webkit-jsc-4 - update to 2.52.6-150600.12.74.1
libjavascriptcoregtk-6_0-1 - update to 2.52.6-150600.12.74.1
libjavascriptcoregtk-4_1-0-debuginfo - update to 2.52.6-150600.12.74.1
libwebkitgtk-6_0-4-debuginfo - update to 2.52.6-150600.12.74.1
webkit2gtk3-soup2-minibrowser - update to 2.52.6-150600.12.74.1

• https://support.apple.com/en-us/148281
• https://webkitgtk.org/security/WSA-2026-0005.html

• Multiple vulnerabilities in WebKitGTK+ and WPE WebKit
• Multiple vulnerabilities in iOS 18 and iPadOS 18
• Ubuntu update for webkit2gtk
• SUSE update for webkit2gtk3