Improper Resource Shutdown or Release Affecting webkitgtk4-jsc-devel package, versions <0:2.48.3-2.el7_9


Severity

Recommended
high

Based on Red Hat Enterprise Linux security rating.

Threat Intelligence

EPSS
0.11% (31st percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-RHEL7-WEBKITGTK4JSCDEVEL-10654460
  • published7 Jul 2025
  • disclosed5 Jul 2022

Introduced: 5 Jul 2022

CVE-2022-22677  (opens in a new tab)
CWE-404  (opens in a new tab)

How to fix?

Upgrade RHEL:7 webkitgtk4-jsc-devel to version 0:2.48.3-2.el7_9 or higher.
This issue was patched in RHSA-2025:10364.

NVD Description

Note: Versions mentioned in the description apply only to the upstream webkitgtk4-jsc-devel package and not the webkitgtk4-jsc-devel package as distributed by RHEL. See How to fix? for RHEL:7 relevant fixed versions and status.

A logic issue in the handling of concurrent media was addressed with improved state handling. This issue is fixed in macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. Video self-preview in a webRTC call may be interrupted if the user answers a phone call.

CVSS Base Scores

version 3.1