Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2024-41132

Good to know:

icon

Date: July 22, 2024

ImageSharp is a 2D graphics API. A vulnerability discovered in the ImageSharp library, where the processing of specially crafted files can lead to excessive memory usage in the Gif decoder. The vulnerability is triggered when ImageSharp attempts to process image files that are designed to exploit this flaw. All users are advised to upgrade to v3.1.5 or v2.1.9.

Language: C#

Severity Score

Related Resources (12)

https://github.com/SixLabors/ImageSharp/pull/2759
https://nvd.nist.gov/vuln/detail/CVE-2024-41132
https://github.com/SixLabors/ImageSharp/commit/9816ca45016c5d3859986f3c600e8934bc450a56
https://github.com/SixLabors/ImageSharp/commit/b496109051cc39feee1f6cde48fca6481de17f9a
https://github.com/SixLabors/ImageSharp/pull/2764
https://github.com/SixLabors/ImageSharp
https://github.com/SixLabors/ImageSharp/commit/59de13c8cc47f2b402e2c43aa7024511d029d515
https://github.com/SixLabors/ImageSharp/pull/2770
https://docs.sixlabors.com/articles/imagesharp/security.html
https://github.com/SixLabors/ImageSharp/security/advisories/GHSA-qxrv-gp6x-rc23
https://docs.sixlabors.com/articles/imagesharp.web/processingcommands.html#securing-processing-commands
https://www.mend.io/vulnerability-database/CVE-2024-41132

Severity Score

Weakness Type (CWE)

Memory Allocation with Excessive Size Value

CWE-789

Allocation of Resources Without Limits or Throttling

CWE-770

Top Fix

icon

Upgrade Version

Upgrade to version SixLabors.ImageSharp - 2.1.9,3.1.5

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): NONE
Integrity (I): NONE
Availability (A): LOW

Do you need more information?

Contact Us