Electron up to 28.3.1/29.3.2/30.0.2 heap-based overflow

Summaryinfo

A vulnerability identified as critical has been detected in Electron up to 28.3.1/29.3.2/30.0.2. This impacts the function nativeImage.createFromPath/nativeImage.createFromBuffer. The manipulation leads to heap-based overflow. This vulnerability is uniquely identified as CVE-2024-46993. Local access is required to approach this attack. No exploit exists. You should upgrade the affected component.

Detailsinfo

A vulnerability was found in Electron up to 28.3.1/29.3.2/30.0.2. It has been rated as critical. This issue affects the function nativeImage.createFromPath/nativeImage.createFromBuffer. The manipulation with an unknown input leads to a heap-based overflow vulnerability. Using CWE to declare the problem leads to CWE-122. A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc(). Impacted is confidentiality, integrity, and availability. The summary by CVE is:

Electron is an open source framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. In versions prior to 28.3.2, 29.3.3, and 30.0.3, the nativeImage.createFromPath() and nativeImage.createFromBuffer() functions call a function downstream that is vulnerable to a heap buffer overflow. An Electron program that uses either of the affected functions is vulnerable to a buffer overflow if an attacker is in control of the image's height, width, and contents. This issue has been patched in versions 28.3.2, 29.3.3, and 30.0.3. There are no workarounds for this issue.

The advisory is shared at github.com. The identification of this vulnerability is CVE-2024-46993 since 09/16/2024. The exploitation is known to be difficult. An attack has to be approached locally. Technical details are known, but no exploit is available.

Upgrading to version 28.3.2, 29.3.3 or 30.0.3 eliminates this vulnerability.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Name

• Electron

Version

• 28.3.0
• 28.3.1
• 29.3.0
• 29.3.1
• 29.3.2
• 30.0.0
• 30.0.1
• 30.0.2

Website

• Product: https://github.com/electron/electron/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion