CVE-2024-41132mediumCWE-789

CVE-2024-41132: falha de média gravidade em SixLabors ImageSharp

SixLabors ImageSharp Allows Excessive Memory Allocation in Gif Decoder

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar ImageSharp+ Monitorar SixLabors.ImageSharp

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.3epss 0.8%
ImageSharp is a 2D graphics API. A vulnerability discovered in the ImageSharp library, where the processing of specially crafted files can lead to excessive memory usage in the Gif decoder. The vulnerability is triggered when ImageSharp attempts to process image files that are designed to exploit this flaw. All users are advised to upgrade to v3.1.5 or v2.1.9.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Produtos afetados
SixLabors · ImageSharp
CVEs relacionadas — SixLabors ImageSharp

No mesmo produto, das mais perigosas para as menos.

CVE-2024-41131HIGHOut-of-bounds Write in SixLabors ImageSharpEPSS 0.7%CVE-2024-32035MEDIUMMemory Allocation with Excessive Size Value in SixLabors.ImageSharpEPSS 0.6%CVE-2026-106118HIGHImageSharp: Tiled fax TIFF: tile buffer sized by TileWidth but fax decompressor writes scanlines of ImageWidth — heap OOB writeEPSS 0.6%CVE-2024-32036MEDIUMSixLabors.ImageSharp vulnerable to data leakageEPSS 0.6%CVE-2025-27598HIGHOut-of-bounds Write in SixLabors ImageSharpEPSS 0.6%CVE-2025-54575MEDIUMImageSharp Triggers an Infinite Loop in its GIF Decoder When Skipping Malformed Comment Extension BlocksEPSS 0.4%