CVE-2024-21640

Chromium Embedded Framework CEF is a simple framework for embedding Chromium-based browsers in other applications.CefVideoConsumerOSR::OnFrameCaptured does not check pixelformat properly, which leads to out-of-bounds read out of the sandbox. This vulnerability was patched in commit 1f55d2e...

CVE-2024-21640

creationtimestamp| type| source ---|---|--- 2024-01-13 09:26:45+00:00| seen| https://t.me/ctinow/167769 2024-01-16 22:04:17+00:00| seen| https://t.me/arpsyndicate/2884 2024-02-03 06:36:12+00:00| seen| https://t.me/ctinow/178400...

CVE-2024-21640

CEF (Chromium Embedded Framework) is affected by CVE-2024-21640 due to CefVideoConsumerOSR::OnFrameCaptured not validating pixel_format, causing an out-of-bounds read in sandboxed code. The issue is described across multiple sources as a buffer/OOB access vulnerability in the video path of CEF; t...

CVE-2024-21640 OOB Access in CefVideoConsumerOSR::OnFrameCaptured

Chromium Embedded Framework CEF is a simple framework for embedding Chromium-based browsers in other applications.CefVideoConsumerOSR::OnFrameCaptured does not check pixelformat properly, which leads to out-of-bounds read out of the sandbox. This vulnerability was patched in commit 1f55d2e...