Approved changes feed: RSS · Atom

cpe:2.3:a:chromiumembedded:chromium_embedded_framework:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorChromiumembedded (ed9d48e9-9362-5d73-b41f-e083ebed18f3)
ProductChromium Embedded Framework (8582130a-8877-5b34-b8aa-1920d40e1a6f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:bitbucket/chromiumembedded/cef purl2cpe 2026-06-01 10:12:21.216221
pkg:github/chromiumembedded/cef purl2cpe 2026-06-01 10:12:21.216223

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-21640 vulnerable 2026-06-08 06:27:36.269709 OOB Access in CefVideoConsumerOSR::OnFrameCaptured
MEDIUM (5.4)
Chromium Embedded Framework (CEF) is a simple framework for embedding Chromium-based browsers in other applications.`CefVideoConsumerOSR::OnFrameCaptured` does not check `pixel_format` properly, which leads to out-of-bounds read out of the sandbox. This vulnerability was patched in commit 1f55d2e.
Published: 2024-01-13T07:40:10.324Z
Updated: 2025-06-17T21:09:22.073Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21639 vulnerable 2026-06-08 06:27:36.269184 OOB Access in CefLayeredWindowUpdaterOSR::OnAllocatedSharedMemory
MEDIUM (5.3)
CEF (Chromium Embedded Framework ) is a simple framework for embedding Chromium-based browsers in other applications. `CefLayeredWindowUpdaterOSR::OnAllocatedSharedMemory` does not check the size of the shared memory, which leads to out-of-bounds read outside the sandbox. This vulnerability was patched in commit 1f55d2e.
Published: 2024-01-12T21:16:06.709Z
Updated: 2024-08-01T22:27:36.148Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.