CVE-2024-21640

CEF (Chromium Embedded Framework) is affected by CVE-2024-21640 due to CefVideoConsumerOSR::OnFrameCaptured not validating pixel_format, causing an out-of-bounds read in sandboxed code. The issue is described across multiple sources as a buffer/OOB access vulnerability in the video path of CEF; t...

CVE-2024-21639

CEF (Chromium Embedded Framework) is affected by an out-of-bounds read in CefLayeredWindowUpdaterOSR::OnAllocatedSharedMemory caused by not checking the shared-memory size. This affects the component responsible for embedding Chromium-based browsers in apps. The issue was patched in commit 1f55d2...