CVE-2025-32318 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	8.8 HIGH	NETWORK	LOW	LOW	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 22.16%

Affected Products (NVD)

Vendor	Product	Version
google	android	16.0

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

libskia

forky	146.20260602~git.3476902+dfsg-5 fixed
sid	146.20260602~git.3476902+dfsg-5 fixed

webkit2gtk

bookworm	vulnerable
bookworm (security)	vulnerable
forky	vulnerable
sid	2.54.1-1 fixed
trixie	vulnerable
trixie (security)	2.54.0-1~deb13u2 fixed

wpewebkit

bookworm	ignored
forky	2.54.0-2 fixed
sid	2.54.1-1 fixed
trixie	ignored

openSUSE / SLES Releases

openSUSE Product

Release

libjavascriptcoregtk-4_0-18

suse enterprise sap 15 SP4	2.54.1-150400.4.152.2 fixed
suse enterprise sap 15 SP5	2.54.1-150400.4.152.2 fixed
suse enterprise server 15 SP4	2.54.1-150400.4.152.2 fixed
suse enterprise server 15 SP5	2.54.1-150400.4.152.2 fixed

libjavascriptcoregtk-4_1-0

suse enterprise sap 15 SP4	2.54.1-150400.4.152.2 fixed
suse enterprise sap 15 SP5	2.54.1-150400.4.152.2 fixed
suse enterprise server 15 SP4	2.54.1-150400.4.152.2 fixed
suse enterprise server 15 SP5	2.54.1-150400.4.152.2 fixed

libjavascriptcoregtk-6_0-1

suse enterprise sap 15 SP4	2.54.1-150400.4.152.2 fixed
suse enterprise sap 15 SP5	2.54.1-150400.4.152.2 fixed
suse enterprise server 15 SP4	2.54.1-150400.4.152.2 fixed
suse enterprise server 15 SP5	2.54.1-150400.4.152.2 fixed

libwebkit2gtk-4_0-37

suse enterprise sap 15 SP4	2.54.1-150400.4.152.2 fixed
suse enterprise sap 15 SP5	2.54.1-150400.4.152.2 fixed
suse enterprise server 15 SP4	2.54.1-150400.4.152.2 fixed
suse enterprise server 15 SP5	2.54.1-150400.4.152.2 fixed

libwebkit2gtk-4_1-0

suse enterprise sap 15 SP4	2.54.1-150400.4.152.2 fixed
suse enterprise sap 15 SP5	2.54.1-150400.4.152.2 fixed
suse enterprise server 15 SP4	2.54.1-150400.4.152.2 fixed
suse enterprise server 15 SP5	2.54.1-150400.4.152.2 fixed

libwebkitgtk-6_0-4

suse enterprise sap 15 SP4	2.54.1-150400.4.152.2 fixed
suse enterprise sap 15 SP5	2.54.1-150400.4.152.2 fixed
suse enterprise server 15 SP4	2.54.1-150400.4.152.2 fixed
suse enterprise server 15 SP5	2.54.1-150400.4.152.2 fixed

typelib-1_0-JavaScriptCore-4_0

suse enterprise sap 15 SP4	2.54.1-150400.4.152.2 fixed
suse enterprise sap 15 SP5	2.54.1-150400.4.152.2 fixed
suse enterprise server 15 SP4	2.54.1-150400.4.152.2 fixed
suse enterprise server 15 SP5	2.54.1-150400.4.152.2 fixed

typelib-1_0-JavaScriptCore-4_1

suse enterprise sap 15 SP4	2.54.1-150400.4.152.2 fixed
suse enterprise sap 15 SP5	2.54.1-150400.4.152.2 fixed
suse enterprise server 15 SP4	2.54.1-150400.4.152.2 fixed
suse enterprise server 15 SP5	2.54.1-150400.4.152.2 fixed

typelib-1_0-WebKit2-4_0

suse enterprise sap 15 SP4	2.54.1-150400.4.152.2 fixed
suse enterprise sap 15 SP5	2.54.1-150400.4.152.2 fixed
suse enterprise server 15 SP4	2.54.1-150400.4.152.2 fixed
suse enterprise server 15 SP5	2.54.1-150400.4.152.2 fixed

typelib-1_0-WebKit2-4_1

suse enterprise sap 15 SP4	2.54.1-150400.4.152.2 fixed
suse enterprise sap 15 SP5	2.54.1-150400.4.152.2 fixed
suse enterprise server 15 SP4	2.54.1-150400.4.152.2 fixed
suse enterprise server 15 SP5	2.54.1-150400.4.152.2 fixed

typelib-1_0-WebKit2WebExtension-4_0

suse enterprise sap 15 SP4	2.54.1-150400.4.152.2 fixed
suse enterprise sap 15 SP5	2.54.1-150400.4.152.2 fixed
suse enterprise server 15 SP4	2.54.1-150400.4.152.2 fixed
suse enterprise server 15 SP5	2.54.1-150400.4.152.2 fixed

typelib-1_0-WebKit2WebExtension-4_1

suse enterprise sap 15 SP4	2.54.1-150400.4.152.2 fixed
suse enterprise sap 15 SP5	2.54.1-150400.4.152.2 fixed
suse enterprise server 15 SP4	2.54.1-150400.4.152.2 fixed
suse enterprise server 15 SP5	2.54.1-150400.4.152.2 fixed

webkit2gtk-4_0-injected-bundles

suse enterprise sap 15 SP4	2.54.1-150400.4.152.2 fixed
suse enterprise sap 15 SP5	2.54.1-150400.4.152.2 fixed
suse enterprise server 15 SP4	2.54.1-150400.4.152.2 fixed
suse enterprise server 15 SP5	2.54.1-150400.4.152.2 fixed

webkit2gtk-4_1-injected-bundles

suse enterprise sap 15 SP4	2.54.1-150400.4.152.2 fixed
suse enterprise sap 15 SP5	2.54.1-150400.4.152.2 fixed
suse enterprise server 15 SP4	2.54.1-150400.4.152.2 fixed
suse enterprise server 15 SP5	2.54.1-150400.4.152.2 fixed

webkit2gtk3-devel

suse enterprise sap 15 SP4	2.54.1-150400.4.152.2 fixed
suse enterprise sap 15 SP5	2.54.1-150400.4.152.2 fixed
suse enterprise server 15 SP4	2.54.1-150400.4.152.2 fixed
suse enterprise server 15 SP5	2.54.1-150400.4.152.2 fixed

webkit2gtk3-soup2-devel

suse enterprise sap 15 SP4	2.54.1-150400.4.152.2 fixed
suse enterprise sap 15 SP5	2.54.1-150400.4.152.2 fixed
suse enterprise server 15 SP4	2.54.1-150400.4.152.2 fixed
suse enterprise server 15 SP5	2.54.1-150400.4.152.2 fixed

webkitgtk-6_0-injected-bundles

suse enterprise sap 15 SP4	2.54.1-150400.4.152.2 fixed
suse enterprise sap 15 SP5	2.54.1-150400.4.152.2 fixed
suse enterprise server 15 SP4	2.54.1-150400.4.152.2 fixed
suse enterprise server 15 SP5	2.54.1-150400.4.152.2 fixed

Common Weakness Enumeration

CWE-122 - Heap-based Buffer Overflow
A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

Vulnerability Media Exposure

[GERMAN] WebKitGTK: Mehrere Schwachstellen
Ein Angreifer kann mehrere Schwachstellen in WebKitGTK ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, Daten zu manipulieren, Spoofing-Angriffe durchzuführen oder Denial-of-Service-Zustände zu verursachen.
Published: 2026-09-28T22:00:00+00:00

References

https://source.android.com/security/bulletin/android-16