CVE-2024-21639 — OOB Access in CefLayeredWindowUpdaterOSR::OnAllocatedSharedMemory
CEF (Chromium Embedded Framework ) is a simple framework for embedding Chromium-based browsers in other applications. `CefLayeredWindowUpdaterOSR::OnAllocatedSharedMemory` does …
Published: 2024-01-12 · CVSS: 5.3 · CVSS 3.1
CEF (Chromium Embedded Framework ) is a simple framework for embedding Chromium-based browsers in other applications. `CefLayeredWindowUpdaterOSR::OnAllocatedSharedMemory` does not check the size of the shared memory, which leads to out-of-bounds read outside the sandbox. This vulnerability was patched in commit 1f55d2e.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7