This advisory covers several vulnerabilities in WebKitGTK+, including CVE-2025-43529 (use-after-free due to improper memory management) and multiple CVEs (CVE-2025-43501, CVE-2025-43531, CVE-2025-43535, CVE-2025-43536, CVE-2025-43541) where processing maliciously crafted web content may lead to unexpected process crashes. These vulnerabilities affect the webkitgtk4 package provided for GTK+ 3 on Red Hat Enterprise Linux 7 Extended Lifecycle Support. The advisory references fixes included in updated packages (e.g., webkitgtk4-2.50.4-2.el7_9) and provides links for applying the update. No CVSS scores are provided in the advisory, but the severity is rated as Important by Red Hat Product Security.

Successful exploitation of these vulnerabilities could lead to denial of service via unexpected process crashes or potentially memory corruption due to use-after-free conditions. This may disrupt applications relying on WebKitGTK+ for web content rendering. There is no indication of known exploits in the wild at this time.

Red Hat has released updated webkitgtk4 packages (e.g., version 2.50.4-2.el7_9) for Red Hat Enterprise Linux 7 Extended Lifecycle Support that address these vulnerabilities. Users should apply these official updates as detailed in the Red Hat advisory (RHSA-2025:23975) and the referenced article https://access.redhat.com/articles/11258. No alternative mitigations or workarounds are specified. Patch status is confirmed as official-fix.