CVE-2026-24925CWE-122

Heap-based buffer overflow vulnerability in the image module

High · published February 6, 2026

CVSS v3.1
7.3
EPSS
0%
Percentile
0.5
In the wild
Unconfirmed
What it is

⚡ A heap-based buffer overflow lurks in the image module, waiting for an unsuspecting user to trip it up! Think of it like a crowded restaurant where a waiter is juggling too many plates — if he drops one, it could cause chaos in the kitchen. Here, the overflow can lead to service disruption, leaving users hungry for access! If exploited, this vulnerability could lead to service outages, meaning your application might go offline just when users need it most. It’s a high-stakes game — availability could be severely compromised, leaving everyone in the dark!

Put simply

Think of it like a crowded restaurant where a waiter is juggling too many plates — if he drops one, it could cause chaos in the kitchen. Here, the overflow can lead to service disruption, leaving users hungry for access! This heap-based buffer overflow allows an attacker to write beyond the boundaries of allocated memory in the image module, which can cause unpredictable behavior or crashes.

What to do

If exploited, this vulnerability could lead to service outages, meaning your application might go offline just when users need it most. It’s a high-stakes game — availability could be severely compromised, leaving everyone in the dark! To safeguard against this, patch your systems immediately to the latest version of the image module. Conduct a thorough review of memory management practices to prevent future vulnerabilities. Don't wait — secure your environment! You've got this! Follow these steps, and you'll be well on your way to patching the hole and securing your application! 🛡️

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00093 · 0.5th percentile
Weakness
CWE-122 · Heap-based Buffer Overflow
Published
2026-02-06T08:22Z
EPSS history
Timeline
  • 06 FEB 08:22Z
    Heap-based buffer overflow vulnerability in the image module
    cvelistv5