CVE-2024-41132mediumCWE-789

CVE-2024-41132: fallo de gravedad media en SixLabors ImageSharp

SixLabors ImageSharp Allows Excessive Memory Allocation in Gif Decoder

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear ImageSharp+ Monitorear SixLabors.ImageSharp

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 5.3epss 0.8%
ImageSharp is a 2D graphics API. A vulnerability discovered in the ImageSharp library, where the processing of specially crafted files can lead to excessive memory usage in the Gif decoder. The vulnerability is triggered when ImageSharp attempts to process image files that are designed to exploit this flaw. All users are advised to upgrade to v3.1.5 or v2.1.9.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Productos afectados
SixLabors · ImageSharp
CVEs relacionadas — SixLabors ImageSharp

En el mismo producto, de las más peligrosas a las menos.

CVE-2024-41131HIGHOut-of-bounds Write in SixLabors ImageSharpEPSS 0.7%CVE-2024-32035MEDIUMMemory Allocation with Excessive Size Value in SixLabors.ImageSharpEPSS 0.6%CVE-2026-106118HIGHImageSharp: Tiled fax TIFF: tile buffer sized by TileWidth but fax decompressor writes scanlines of ImageWidth — heap OOB writeEPSS 0.6%CVE-2024-32036MEDIUMSixLabors.ImageSharp vulnerable to data leakageEPSS 0.6%CVE-2025-27598HIGHOut-of-bounds Write in SixLabors ImageSharpEPSS 0.6%CVE-2025-54575MEDIUMImageSharp Triggers an Infinite Loop in its GIF Decoder When Skipping Malformed Comment Extension BlocksEPSS 0.4%