Integer Overflow in Mapbox's gl-native Library Prior to Version 10.6.1

CVE-2022-38216

What is CVE-2022-38216?

An integer overflow vulnerability exists in Mapbox's proprietary gl-native library before version 10.6.1. This security flaw is triggered by large image height and width values when creating a new image, which can lead to out-of-bounds writes. Such actions may cause instability, potentially crashing the Mapbox process and exposing systems to further risks. It is crucial for users to update to the latest version to mitigate potential threats related to this vulnerability.

References