Logo
vulnerabilityCVE-2024-6655
Name
CVE-2024-6655
Source
NVD ( link)Debian ( link)
Description
A flaw was found in the GTK library. Under certain conditions, it is possible for a library to be injected into a GTK application from the current working directory.
Published Date
Updated Date
Workaround
-
Advisories

Analysis#


Affected Component
Analysis
gtk+3
Patched
gtk4
Patched
gtk+
Patched

Vulnerability Ratings#


7
CVSSv31
NaN
other

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
2025.02.x
2.24.33
Not Affected
buildroot
2025.02.x
3.24.51
Not Affected
buildroot
2025.02.x
4.14.5
Not Affected
buildroot
master
3.24.51
Not Affected
buildroot
master
4.21.0
Not Affected
openwrt
master
4.22.4-r1
Not Affected
openwrt
openwrt-25.12
4.18.6-r1
Not Affected
yocto
master
2.24.33
Patched
yocto
master
3.24.52
Not Affected
yocto
master
4.22.4
Not Affected
yocto
scarthgap
2.24.33
Patched
yocto
scarthgap
3.24.41
Not Affected
yocto
scarthgap
4.14.1
Not Affected

Resolved with patches#


gtk+ (yocto:kirkstone)

#
Title
Author
Resolve
1
Stop looking for modules in cwd
Matthias Clasen <mclasen@redhat.com>
CVE-2024-6655

gtk+3 (yocto:kirkstone)

#
Title
Author
Resolve
1
Stop looking for modules in cwd
Matthias Clasen <mclasen@redhat.com>
CVE-2024-6655

gtk+ (yocto:master)

#
Title
Author
Resolve
1
Stop looking for modules in cwd
Matthias Clasen <mclasen@redhat.com>
CVE-2024-6655

gtk+ (yocto:scarthgap)

#
Title
Author
Resolve
1
Stop looking for modules in cwd
Matthias Clasen <mclasen@redhat.com>
CVE-2024-6655