Approved changes feed: RSS · Atom

cpe:2.3:a:chromiumembedded:cef:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorChromiumembedded (ed9d48e9-9362-5d73-b41f-e083ebed18f3)
ProductCef (d06f1473-243a-59c3-b14d-39f52da8efa2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-21640 vulnerable 2026-06-08 06:27:36.269557 OOB Access in CefVideoConsumerOSR::OnFrameCaptured
MEDIUM (5.4)
Chromium Embedded Framework (CEF) is a simple framework for embedding Chromium-based browsers in other applications.`CefVideoConsumerOSR::OnFrameCaptured` does not check `pixel_format` properly, which leads to out-of-bounds read out of the sandbox. This vulnerability was patched in commit 1f55d2e.
Published: 2024-01-13T07:40:10.324Z
Updated: 2025-06-17T21:09:22.073Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21639 vulnerable 2026-06-08 06:27:36.268349 OOB Access in CefLayeredWindowUpdaterOSR::OnAllocatedSharedMemory
MEDIUM (5.3)
CEF (Chromium Embedded Framework ) is a simple framework for embedding Chromium-based browsers in other applications. `CefLayeredWindowUpdaterOSR::OnAllocatedSharedMemory` does not check the size of the shared memory, which leads to out-of-bounds read outside the sandbox. This vulnerability was patched in commit 1f55d2e.
Published: 2024-01-12T21:16:06.709Z
Updated: 2024-08-01T22:27:36.148Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.