Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2024-21640

OOB Access in CefVideoConsumerOSR::OnFrameCaptured

Description

Chromium Embedded Framework (CEF) is a simple framework for embedding Chromium-based browsers in other applications.`CefVideoConsumerOSR::OnFrameCaptured` does not check `pixel_format` properly, which leads to out-of-bounds read out of the sandbox. This vulnerability was patched in commit 1f55d2e.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

chromiumembedded cef

  • < commit 1f55d2eaffected

References