# CVE-2014-1745: webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgt... CVE-2014-1745 is fixed in 5 products on 1 platform, first by DSA-5527-1, released October 12, 2023. It is not reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/cve/CVE-2014-1745 - Priority: High - CVSS: 7.1 (Important) - EPSS: 0.0168 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: Oct 12, 2023 ## Description WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgtk: use-after-free in the MediaRecorder API of the WebKit GStreamer-based ports (CVE-2023-39928) * webkitgtk: Arbitrary Remote Code Execution (CVE-2023-42917) * webkitgtk: processing a malicious image may lead to a denial of service (CVE-2023-42883) * webkitgtk: processing malicious web content may lead to arbitrary code execution (CVE-2023-42890) * webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2023-40414) * webkitgtk: Processing a file may lead to a denial of service or potentially disclose memory contents (CVE-2014-1745) * webkitgtk: User password may be read aloud by a text-to-speech accessibility feature (CVE-2023-32359) * webkitgtk: Processing web content may lead to a denial of service (CVE-2023-41983) * webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2023-42852) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 8 Release Notes linked from the References section. ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Linux | webkit2gtk Debian 11.6 (bullseye) | 2.42.1-1~deb11u1 | [DSA-5527-1](https://patchblox.com/security/data/fix/linux/dsa-5527-1.md) | Oct 12, 2023 | | Linux | webkit2gtk Debian 12.15 (bookworm) | 2.42.1-1~deb12u1 | [DSA-5527-1](https://patchblox.com/security/data/fix/linux/dsa-5527-1.md) | Oct 12, 2023 | | Linux | webkit2gtk3 RHEL 8 | 0:2.42.5-1.el8 | [RHSA-2024:2982](https://patchblox.com/security/data/fix/linux/rhsa-2024-2982.md) | May 22, 2024 | | Linux | webkit2gtk3 RHEL 9 | 0:2.42.5-1.el9 | [RHSA-2024:2126](https://patchblox.com/security/data/fix/linux/rhsa-2024-2126.md) | Apr 30, 2024 | | Linux | webkit2gtk3 almalinux 8 | 2.42.5-1.el8 | [ALSA-2024:2982](https://patchblox.com/security/data/fix/linux/alsa-2024-2982.md) | May 22, 2024 | | Linux | webkit2gtk3 almalinux 9 | 2.42.5-1.el9 | [ALSA-2024:2126](https://patchblox.com/security/data/fix/linux/alsa-2024-2126.md) | Apr 30, 2024 | | Linux | webkit2gtk3 ol 8 | 0:2.42.5-1.el8 | [ELSA-2024-2982](https://patchblox.com/security/data/fix/linux/elsa-2024-2982.md) | May 23, 2024 | | Linux | webkit2gtk3 ol 9 | 0:2.42.5-1.el9 | [ELSA-2024-2126](https://patchblox.com/security/data/fix/linux/elsa-2024-2126.md) | May 2, 2024 | | Linux | webkit2gtk3 rocky 8 | 0:2.42.5-1.el8 | [RLSA-2024:2982](https://patchblox.com/security/data/fix/linux/rlsa-2024-2982.md) | Jun 14, 2024 | | Linux | webkit2gtk3-devel RHEL 8 | 0:2.42.5-1.el8 | [RHSA-2024:2982](https://patchblox.com/security/data/fix/linux/rhsa-2024-2982.md) | May 22, 2024 | | Linux | webkit2gtk3-devel RHEL 9 | 0:2.42.5-1.el9 | [RHSA-2024:2126](https://patchblox.com/security/data/fix/linux/rhsa-2024-2126.md) | Apr 30, 2024 | | Linux | webkit2gtk3-devel almalinux 8 | 2.42.5-1.el8 | [ALSA-2024:2982](https://patchblox.com/security/data/fix/linux/alsa-2024-2982.md) | May 22, 2024 | | Linux | webkit2gtk3-devel almalinux 9 | 2.42.5-1.el9 | [ALSA-2024:2126](https://patchblox.com/security/data/fix/linux/alsa-2024-2126.md) | Apr 30, 2024 | | Linux | webkit2gtk3-devel ol 8 | 0:2.42.5-1.el8 | [ELSA-2024-2982](https://patchblox.com/security/data/fix/linux/elsa-2024-2982.md) | May 23, 2024 | | Linux | webkit2gtk3-devel ol 9 | 0:2.42.5-1.el9 | [ELSA-2024-2126](https://patchblox.com/security/data/fix/linux/elsa-2024-2126.md) | May 2, 2024 | | Linux | webkit2gtk3-jsc RHEL 8 | 0:2.42.5-1.el8 | [RHSA-2024:2982](https://patchblox.com/security/data/fix/linux/rhsa-2024-2982.md) | May 22, 2024 | | Linux | webkit2gtk3-jsc RHEL 9 | 0:2.42.5-1.el9 | [RHSA-2024:2126](https://patchblox.com/security/data/fix/linux/rhsa-2024-2126.md) | Apr 30, 2024 | | Linux | webkit2gtk3-jsc almalinux 8 | 2.42.5-1.el8 | [ALSA-2024:2982](https://patchblox.com/security/data/fix/linux/alsa-2024-2982.md) | May 22, 2024 | | Linux | webkit2gtk3-jsc almalinux 9 | 2.42.5-1.el9 | [ALSA-2024:2126](https://patchblox.com/security/data/fix/linux/alsa-2024-2126.md) | Apr 30, 2024 | | Linux | webkit2gtk3-jsc ol 8 | 0:2.42.5-1.el8 | [ELSA-2024-2982](https://patchblox.com/security/data/fix/linux/elsa-2024-2982.md) | May 23, 2024 | | Linux | webkit2gtk3-jsc ol 9 | 0:2.42.5-1.el9 | [ELSA-2024-2126](https://patchblox.com/security/data/fix/linux/elsa-2024-2126.md) | May 2, 2024 | | Linux | webkit2gtk3-jsc-devel RHEL 8 | 0:2.42.5-1.el8 | [RHSA-2024:2982](https://patchblox.com/security/data/fix/linux/rhsa-2024-2982.md) | May 22, 2024 | | Linux | webkit2gtk3-jsc-devel RHEL 9 | 0:2.42.5-1.el9 | [RHSA-2024:2126](https://patchblox.com/security/data/fix/linux/rhsa-2024-2126.md) | Apr 30, 2024 | | Linux | webkit2gtk3-jsc-devel almalinux 8 | 2.42.5-1.el8 | [ALSA-2024:2982](https://patchblox.com/security/data/fix/linux/alsa-2024-2982.md) | May 22, 2024 | | Linux | webkit2gtk3-jsc-devel almalinux 9 | 2.42.5-1.el9 | [ALSA-2024:2126](https://patchblox.com/security/data/fix/linux/alsa-2024-2126.md) | Apr 30, 2024 | | Linux | webkit2gtk3-jsc-devel ol 8 | 0:2.42.5-1.el8 | [ELSA-2024-2982](https://patchblox.com/security/data/fix/linux/elsa-2024-2982.md) | May 23, 2024 | | Linux | webkit2gtk3-jsc-devel ol 9 | 0:2.42.5-1.el9 | [ELSA-2024-2126](https://patchblox.com/security/data/fix/linux/elsa-2024-2126.md) | May 2, 2024 | --- Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo