PatchGap
Firefox · Core

CVE-2024-43097

OOB in Core
Critical CVSS 7.8 firefox OOB

Overview

Critical
Severity
7.8
CVSS
No
Exploited ITW
Embargoed
Fix Status
Impactcritical
DescriptionIn resizeToAtLeast of SkRegion.cpp, there was a possible out of bounds write due to an integer overflow
ComponentCore
Bug ClassOOB
Tracker1945624
CWECWE-787 (Out-of-bounds write)
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CISA KEVNot listed
CreditedGoogle Android
Disclosed2025-01-07

Fix not yet public

No public source fix for this bug has been identified on the main branch yet — it is embargoed or not yet disclosed. Root-cause analysis is withheld until the fix commit is available.
On This Page