CVE-2021-21775: Debian Linux

High severity, CVSS 8.0. EPSS: 1.3% chance of exploitation in the next 30 days.

A use-after-free vulnerability exists in the way certain events are processed for ImageLoader objects of Webkit WebKitGTK 2.30.4. A specially crafted web page can lead to a potential information leak and further memory corruption. In order to trigger the vulnerability, a victim must be tricked into visiting a malicious webpage.

Affected products

• Debian Debian Linux: version 10.0 only
• Fedoraproject Fedora: version 33 only; version 34 only
• WebKitGTK WebKitGTK: version 2.30.4 only

Published 2021-07-07. Last modified 2026-06-17.