Red Hat Product Security issued an advisory (RHSA-2025:0278) for webkit2gtk3 on Red Hat Enterprise Linux 8.4 variants, addressing four vulnerabilities in the WebKitGTK engine. These vulnerabilities allow processing of maliciously crafted web content to lead to unexpected process crashes (CVE-2024-54479, CVE-2024-54502, CVE-2024-54508) and memory corruption (CVE-2024-54505). The advisory rates the update as important and provides updated packages to remediate these issues. No CVSS scores are provided in the advisory, and no known exploits in the wild have been reported. The advisory includes detailed package updates and references for remediation.

Successful exploitation of these vulnerabilities may cause affected processes to crash unexpectedly or experience memory corruption, potentially leading to denial of service or other stability issues. The impact is rated as important by Red Hat, indicating a high security concern but no confirmed active exploitation. No further impact details such as code execution or data disclosure are provided in the advisory.

Red Hat has released updated webkit2gtk3 packages for Red Hat Enterprise Linux 8.4 variants that address these vulnerabilities. Users should apply the security update as described in the Red Hat advisory RHSA-2025:0278 and the referenced article https://access.redhat.com/articles/11258 to remediate the issues. Patch status is confirmed as a vendor-provided official fix. No additional mitigation steps are indicated by the vendor.