Out of Bounds Write in Skia Alloc Function of Android Products

CVE-2024-43768

Summary

The vulnerability is located in the skia_alloc_func of SkDeflate.cpp, where an integer overflow may lead to an out of bounds write. This flaw has the potential to enable local privilege escalation without requiring additional execution privileges. Exploitation does not necessitate user interaction, which raises concerns about the security posture of affected Android devices. This vulnerability highlights the need for prompt remediation measures to safeguard against potential attacks that may exploit this weakness.

References