CVE-2024-41131CWE-787

Out-of-bounds Write in SixLabors ImageSharp

High · published July 22, 2024

CVSS v3.1
7.5
EPSS
1%
Percentile
51.4
In the wild
Unconfirmed
What it is

ImageSharp is a 2D graphics API. An Out-of-bounds Write vulnerability has been found in the ImageSharp gif decoder, allowing attackers to cause a crash using a specially crafted gif. This can potentially lead to denial of service. All users are advised to upgrade to v3.1.5 or v2.1.9.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00669 · 51.4th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2024-07-22T14:24Z
EPSS history
Timeline
  • 22 JUL 14:24Z
    Out-of-bounds Write in SixLabors ImageSharp
    cvelistv5