Approved changes feed: RSS · Atom

cpe:2.3:a:chromiumembedded:chromium_embedded_framework:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorChromiumembedded (ed9d48e9-9362-5d73-b41f-e083ebed18f3)
ProductChromium Embedded Framework (8582130a-8877-5b34-b8aa-1920d40e1a6f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:bitbucket/chromiumembedded/cef purl2cpe 2026-06-01 10:12:21.216224
pkg:github/chromiumembedded/cef purl2cpe 2026-06-01 10:12:21.216225

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-21639 vulnerable 2026-06-08 06:27:36.267556 OOB Access in CefLayeredWindowUpdaterOSR::OnAllocatedSharedMemory
MEDIUM (5.3)
CEF (Chromium Embedded Framework ) is a simple framework for embedding Chromium-based browsers in other applications. `CefLayeredWindowUpdaterOSR::OnAllocatedSharedMemory` does not check the size of the shared memory, which leads to out-of-bounds read outside the sandbox. This vulnerability was patched in commit 1f55d2e.
Published: 2024-01-12T21:16:06.709Z
Updated: 2024-08-01T22:27:36.148Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.