yocto ▾
›
scarthgap ▾
›
vulnerability
›
CVE-2024-6655
Component Overview
Vulnerability Overview
Name
CVE-2024-6655
Source
NVD (
link
)
Debian (
link
)
Description
A flaw was found in the GTK library. Under certain conditions, it is possible for a library to be injected into a GTK application from the current working directory.
CWEs
CWE-94
Published Date
Jul 16, 2024
Updated Date
Jun 17, 2026
Workaround
-
Advisories
Analysis
#
Affected Component
Analysis
gtk+
Patched
Vulnerability Ratings
#
7
CVSSv31
NaN
other
Others affected components
#
Name
Project
Project Version
Version
Status
gtk+
yocto
kirkstone
2.24.33
Patched
gtk+
yocto
master
2.24.33
Patched
Resolved with patches
#
gtk+ (yocto:kirkstone)
#
Title
Author
Resolve
1
Stop looking for modules in cwd
Matthias Clasen <mclasen@redhat.com>
CVE-2024-6655
gtk+ (yocto:master)
#
Title
Author
Resolve
1
Stop looking for modules in cwd
Matthias Clasen <mclasen@redhat.com>
CVE-2024-6655
gtk+ (yocto:scarthgap)
#
Title
Author
Resolve
1
Stop looking for modules in cwd
Matthias Clasen <mclasen@redhat.com>
CVE-2024-6655