CVE-2024-41132

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-41132
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-41132.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-41132
Aliases
Published
2024-07-22T14:28:25.348Z
Modified
2026-04-24T12:11:49.176765Z
Severity
  • 5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVSS Calculator
Summary
SixLabors ImageSharp Allows Excessive Memory Allocation in Gif Decoder
Details

ImageSharp is a 2D graphics API. A vulnerability discovered in the ImageSharp library, where the processing of specially crafted files can lead to excessive memory usage in the Gif decoder. The vulnerability is triggered when ImageSharp attempts to process image files that are designed to exploit this flaw. All users are advised to upgrade to v3.1.5 or v2.1.9.

Database specific 
{
    "cwe_ids": [
        "CWE-789"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/41xxx/CVE-2024-41132.json",
    "cna_assigner": "GitHub_M"
}
References

Affected packages

Git / github.com/sixlabors/imagesharp

Affected ranges

Type
GIT
Repo
https://github.com/sixlabors/imagesharp
Events
Introduced
6ec1692ee295923d9d40956befd4417d6735507b
Fixed
65bd9b5ccdecf4441321b661635c1469dc7b08e4

Affected versions

v3.*
v3.0.0
v3.0.1
v3.1.0
v3.1.1
v3.1.2
v3.1.3
v3.1.4

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-41132.json"