EUVD-2024-54987

Malicious code in bioql PyPI...

SUSE CVE-2024-46993

Electron is an open source framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. In versions prior to 28.3.2, 29.3.3, and 30.0.3, the nativeImage.createFromPath and nativeImage.createFromBuffer functions call a function downstream that is vulnerable to a heap...

Heap Buffer Overflow

electron is vulnerable to Heap buffer overflow. The vulnerability is due to improper handling of image data in the nativeImage.createFromPath and nativeImage.createFromBuffer functions, which allows an attacker by supplying crafted image data with controlled height, width, and contents...

CVE-2024-46993

CVE-2024-46993 : In Electron, the nativeImage.createFromPath() and nativeImage.createFromBuffer() functions are vulnerable to a heap-based buffer overflow when processing image data whose height, width, or contents are controlled by an attacker. Affected releases include Electron versions prior t...

CVE-2024-46993 Electron Vulnerable to Heap Buffer Overflow in NativeImage::CreateFromPath

Electron is an open source framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. In versions prior to 28.3.2, 29.3.3, and 30.0.3, the nativeImage.createFromPath and nativeImage.createFromBuffer functions call a function downstream that is vulnerable to a heap...

Electron 安全漏洞

Electron is Electron open source a user to write cross-platform desktop application JavaScript framework. The framework is based on nodejs and Chromium can use HTML, CSS to realize the writing of cross-platform desktop applications. A security vulnerability exists in Electron versions prior to...

Electron vulnerable to Heap Buffer Overflow in NativeImage

Impact The nativeImage.createFromPath and nativeImage.createFromBuffer functions call a function downstream that is vulnerable to a heap buffer overflow. An Electron program that uses either of the affected functions is vulnerable to a buffer overflow if an attacker is in control of the image's...

Electron's sandboxed renderers can obtain thumbnails of arbitrary files through the nativeImage API

Impact This vulnerability allows a sandboxed renderer to request a "thumbnail" image of an arbitrary file on the user's system. The thumbnail can potentially include significant parts of the original file, including textual data in many cases. All current stable versions of Electron are affected...