high7.5
CVE-2024-41131
SixLabors ImageSharp Out-of-bounds Write
Impact
### Impact An Out-of-bounds Write vulnerability has been found in the ImageSharp gif decoder, allowing attackers to cause a crash using a specially crafted gif. This can potentially lead to denial of service. ### Patches The problem has been patched. All users are advised to upgrade to v3.1.5 or v2.1.9. ### Workarounds None. ### References https://github.com/SixLabors/ImageSharp/pull/2754 https://github.com/SixLabors/ImageSharp/pull/2756
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| nuget | SixLabors.ImageSharp | < 2.1.9 | 2.1.9 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sixlabors | Imagesharp | from 2.1.0 before 2.1.9 from 3.1.0 before 3.1.5 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://github.com/SixLabors/ImageSharp/commit/9dda64a8186af67baf06b6d9c1ab599c3608b693
- https://github.com/SixLabors/ImageSharp/commit/a1f287977139109a987065643b8172c748abdadb
- https://github.com/SixLabors/ImageSharp/pull/2754
- https://github.com/SixLabors/ImageSharp/pull/2756
- https://github.com/SixLabors/ImageSharp/security/advisories/GHSA-63p8-c4ww-9cg7
- https://github.com/advisories/GHSA-63p8-c4ww-9cg7
- https://nvd.nist.gov/vuln/detail/CVE-2024-41131