CVE-2024-43097

In resizeToAtLeast of SkRegion.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privile...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

In resizeToAtLeast of SkRegion.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Paquets affectés

Android platform/external/skia

[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2024-12-01"}]}]

État des correctifs par distribution

Paquets corrigés publiés par chaque distribution pour cette CVE

Debian DEBIAN-CVE-2024-43097 firefox-esr Corrigé dans: 128.8.0esr-1~deb11u1

Références

advisory source.android.com
patch android.googlesource.com
web lists.debian.org