PT-2024-30640 · Skia · Skia

Published 2024-12-01 · Updated 2025-04-21 · CVE-2024-43767

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Skia (affected versions not specified)

Description The issue is related to a possible heap overflow due to improper input validation in the prepare to draw into mask function of SkBlurMaskFilterImpl.cpp. This could lead to remote code execution with no additional execution privileges needed. User interaction is not required for exploitation. The vulnerability is caused by a zero width/height bounds condition, which leads to mask->computeImageSize() returning zero, and subsequently, SkMask::AllocImage(0) is called without a size check, resulting in mask->fImage becoming a nullptr or invalid pointer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Code Injection

Buffer Overflow

Weakness Enumeration

CWE-94

CWE-120

Related Identifiers

ASB-A-352631932

CVE-2024-43767

Affected Products

Skia

References · 19

• https://osv.dev/vulnerability/ASB-A-352631932 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-43767 · Security Note
• https://osv.dev/vulnerability/CVE-2024-43767 · Vendor Advisory
• https://source.android.com/security/bulletin/2024-12-01 · Vendor Advisory
• https://twitter.com/CVEnew/status/1875033736334422449 · Twitter Post
• https://twitter.com/Eth1calHackrZ/status/1866426380809826743 · Twitter Post
• https://twitter.com/cracbot/status/1876871521656074325 · Twitter Post
• https://t.me/cvedetector/14199 · Telegram Post
• https://twitter.com/xvonfers/status/1863869500283584757 · Twitter Post
• https://twitter.com/StellDex_HQ/status/1867999820151165245 · Twitter Post
• https://twitter.com/StellDex_HQ/status/1867999591637143943 · Twitter Post
• https://twitter.com/MonkeysInsight/status/1864271727016202534 · Twitter Post
• https://t.me/cvenotify/119196 · Telegram Post
• https://android.googlesource.com/platform/external/skia/+/796c2040f641bb287dba66c9823ce45e9f8b5807 · Note
• https://t.me/cvenotify/106279 · Telegram Post