CVE-2024-43091
In filterMask of SkEmbossMaskFilter.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
In filterMask of SkEmbossMaskFilter.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
Paquets affectés
Android
platform/external/skia
[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2024-11-01"}]}]
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2024-43091 webkit2gtk
- Ubuntu UBUNTU-CVE-2024-43091 qtwebkit-opensource-src
Références
- advisory source.android.com
- patch android.googlesource.com