CVE-2024-43091

9.8 criticalEPSS 0.7%

Critical (9.8) in google android. EPSS 0.7% chance of exploitation in the next 30 days.

In filterMask of SkEmbossMaskFilter.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 54% of CVEs (scores of 2026-10-31)
CWEs: CWE-190, CWE-787
Published: 2024-11-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

google:android

References

https://android.googlesource.com/platform/external/skia/+/0b628a960e74197ace9831ef0727f5ba7ab6ac10
https://source.android.com/security/bulletin/2024-11-01

Check your stack JSON