Description

ImageSharp is a 2D graphics API. A vulnerability discovered in the ImageSharp library, where the processing of specially crafted files can lead to excessive memory usage in the Gif decoder. The vulnerability is triggered when ImageSharp attempts to process image files that are designed to exploit this flaw. All users are advised to upgrade to v3.1.5 or v2.1.9.

INFO

Published Date :

2024-07-22T14:28:25.348Z

Last Modified :

2024-08-02T04:46:52.026Z

Source :

GitHub_M
AFFECTED PRODUCTS

The following products are affected by CVE-2024-41132 vulnerability.

Vendors Products
Sixlabors
  • Imagesharp
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-41132.

URL Resource
https://docs.sixlabors.com/articles/imagesharp.web/processingcommands.html#securing-processing-commands cve-icon cve-icon cve-icon
https://docs.sixlabors.com/articles/imagesharp/security.html cve-icon cve-icon cve-icon
https://github.com/SixLabors/ImageSharp/commit/59de13c8cc47f2b402e2c43aa7024511d029d515 cve-icon cve-icon cve-icon
https://github.com/SixLabors/ImageSharp/commit/9816ca45016c5d3859986f3c600e8934bc450a56 cve-icon cve-icon cve-icon
https://github.com/SixLabors/ImageSharp/commit/b496109051cc39feee1f6cde48fca6481de17f9a cve-icon cve-icon cve-icon
https://github.com/SixLabors/ImageSharp/pull/2759 cve-icon cve-icon cve-icon
https://github.com/SixLabors/ImageSharp/pull/2764 cve-icon cve-icon cve-icon
https://github.com/SixLabors/ImageSharp/pull/2770 cve-icon cve-icon cve-icon
https://github.com/SixLabors/ImageSharp/security/advisories/GHSA-qxrv-gp6x-rc23 cve-icon cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact