CVE-2024-41132CWE-789

SixLabors ImageSharp Allows Excessive Memory Allocation in Gif Decoder

Medium · published July 22, 2024

CVSS v3.1
5.3
EPSS
1%
Percentile
55.3
In the wild
Unconfirmed
What it is

ImageSharp is a 2D graphics API. A vulnerability discovered in the ImageSharp library, where the processing of specially crafted files can lead to excessive memory usage in the Gif decoder. The vulnerability is triggered when ImageSharp attempts to process image files that are designed to exploit this flaw. All users are advised to upgrade to v3.1.5 or v2.1.9.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00774 · 55.3th percentile
Weakness
CWE-789 · Memory Allocation with Excessive Size Value
Published
2024-07-22T14:28Z
EPSS history
Timeline
  • 22 JUL 14:28Z
    SixLabors ImageSharp Allows Excessive Memory Allocation in Gif Decoder
    cvelistv5