This advisory covers four security vulnerabilities in webkit2gtk3 as used in Red Hat Enterprise Linux 9.0. The vulnerabilities (CVE-2024-54479, CVE-2024-54502, CVE-2024-54505, CVE-2024-54508) involve processing maliciously crafted web content that can lead to unexpected process crashes or memory corruption. The issues correspond to CWE-404 (improper resource shutdown), CWE-125 (out-of-bounds read), CWE-843 (type confusion), and CWE-20 (input validation). Red Hat has released updated webkit2gtk3 packages (version 2.46.5-1.el9_0) to fix these vulnerabilities. No CVSS scores are provided in the advisory.

Exploitation of these vulnerabilities may cause denial of service through unexpected process crashes or potentially memory corruption, which could lead to further undefined behavior or security risks. The impact is rated as important by Red Hat, indicating a significant security concern but no confirmed exploits in the wild have been reported.

Red Hat has released updated webkit2gtk3 packages (version 2.46.5-1.el9_0) that address these vulnerabilities. Users should apply the security update as described in the Red Hat advisory RHSA-2025:0283 and the referenced update article (https://access.redhat.com/articles/11258). No additional mitigation steps are indicated beyond applying the official patch.