Out of Bounds Write Vulnerability in Android Skia Graphics Library

CVE-2024-43097

Summary

A vulnerability has been identified in the Android Skia graphics library within the resizeToAtLeast function in SkRegion.cpp. The issue arises from an integer overflow that may result in an out of bounds write, allowing for potential local escalation of privilege without the need for additional execution privileges or user interaction. This presents a significant risk as it can enable attackers to perform unauthorized actions or access sensitive parts of the system.

References