CVE-2021-21775

Name of the Vulnerable Software and Affected Versions WebKitGTK version 2.30.4

Description A use-after-free vulnerability exists in the way certain events are processed for ImageLoader objects of WebKit. This vulnerability can be exploited by a remote attacker, allowing them to access confidential data, compromise data integrity, and cause a denial of service. A specially crafted web page can lead to a potential information leak and further memory corruption. To trigger the vulnerability, a victim must be tricked into visiting a malicious webpage.

Recommendations For WebKitGTK version 2.30.4, consider disabling the ImageLoader object until a patch is available to prevent potential information leaks and memory corruption. Restrict access to malicious web pages to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.