Red Hat Product Security released advisory RHSA-2025:2034 addressing five vulnerabilities in webkit2gtk3. The issues include CVE-2024-54543 (memory corruption from malicious web content), CVE-2025-24143 (user fingerprinting via crafted webpages), CVE-2025-24150 (command injection when copying URLs from Web Inspector), CVE-2025-24158 (denial-of-service from web content processing), and CVE-2025-24162 (unexpected process crash from malicious web content). These vulnerabilities affect Red Hat Enterprise Linux 8 across multiple hardware architectures. The advisory provides updated packages to remediate these issues. Detailed CVSS scores and exploitation details are referenced on the CVE pages. No known exploits in the wild have been reported at the time of the advisory.

Exploitation of these vulnerabilities could lead to memory corruption, enabling potential arbitrary code execution or application instability; user fingerprinting that may compromise user privacy; command injection via Web Inspector URL copying, which could allow execution of unintended commands; denial-of-service conditions causing application or system disruption; and unexpected process crashes. The combined impact affects the security and stability of applications using webkit2gtk3 on affected Red Hat Enterprise Linux 8 systems.

Red Hat has released updated webkit2gtk3 packages for Red Hat Enterprise Linux 8 to address these vulnerabilities. Users and administrators should apply the security update as detailed in Red Hat advisory RHSA-2025:2034 and the referenced article https://access.redhat.com/articles/11258. Applying these updates will remediate the identified security issues. No additional mitigation steps are specified or required beyond applying the official patches.