-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from improper handling of media frame calculations that lacked integer overflow protection and buffer boundary checks. The commit diff shows systematic replacement of signed integers with unsigned types, addition of MAX_PLANE_COUNT checks, and introduction of validation functions (CalcSize/AddSize/CalcPlanePointer). These changes specifically address scenarios where unvalidated arithmetic operations could lead to memory corruption vulnerabilities. The affected functions were directly involved in critical media buffer management operations prior to these safety checks being implemented.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.openjfx:javafx-media | maven | < 17.0.10 | 17.0.10 |
| org.openjfx:javafx-media | maven | >= 18, < 21.0.2 | 21.0.2 |
A Semantic Attack on Google Gemini - Read the Latest Research