Medium severity5.3NVD Advisory· Published Jan 12, 2024· Updated Jun 17, 2026

CVE-2024-21639

Description

CEF (Chromium Embedded Framework ) is a simple framework for embedding Chromium-based browsers in other applications. CefLayeredWindowUpdaterOSR::OnAllocatedSharedMemory does not check the size of the shared memory, which leads to out-of-bounds read outside the sandbox. This vulnerability was patched in commit 1f55d2e.

Affected products

Chromium Embedded Framework/Chromium Embedded Frameworkllm-create
chromiumembedded/cefllm-fuzzy2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: < commit 1f55d2e

Patches

Vulnerability mechanics

References

github.com/chromiumembedded/cef/commit/1f55d2e12f62cfdfbf9da6968fde2f928982670bnvdPatch
github.com/chromiumembedded/cef/security/advisories/GHSA-m375-jw5x-x8mgnvdExploitVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000