CVE-2024-21640

Summary

CVE-2024-21640 is a vulnerability affecting the Chromium Embedded Framework (CEF). This framework allows developers to embed Chromium-based browsers in other applications. The issue lies in `CefVideoConsumerOSR::OnFrameCaptured`, where improper checking of `pixel_format` results in an out-of-bounds read, potentially allowing for sandbox escape. This vulnerability was addressed in commit 1f55d2e.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.