critical9.8
CVE-2021-24112
.NET Core Remote Code Execution Vulnerability
Impact
A remote code execution vulnerability exists when parsing certain types of graphics files. This vulnerability only exists on systems running on MacOS or Linux. This CVE ID is unique from CVE-2021-26701.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| nuget | System.Drawing.Common | >= 4.0.0, < 4.7.2 | 4.7.2 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | .Net | from 5.0 through 5.0.2 |
| Microsoft | .Net Core | from 2.1 through 2.1.24 from 3.1 through 3.1.11 |
| Microsoft | Mono | from 6.12.0 before 6.12.0.122 |
| Microsoft | Visual Studio 2019 | All versions |