CVE-2024-41132

MEDIUM

ImageSharp < 2.1.9 - Denial of Service via Gif Decoder

Title source: llm
STIX 2.1

Description

ImageSharp is a 2D graphics API. A vulnerability discovered in the ImageSharp library, where the processing of specially crafted files can lead to excessive memory usage in the Gif decoder. The vulnerability is triggered when ImageSharp attempts to process image files that are designed to exploit this flaw. All users are advised to upgrade to v3.1.5 or v2.1.9.

References (9)

Core 9
Core References
Issue Tracking x_refsource_misc
https://github.com/SixLabors/ImageSharp/pull/2759
Issue Tracking x_refsource_misc
https://github.com/SixLabors/ImageSharp/pull/2764
Issue Tracking x_refsource_misc
https://github.com/SixLabors/ImageSharp/pull/2770

Scores

CVSS v3 5.3
EPSS 0.0077
EPSS Percentile 50.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-770 CWE-789
Status published
Products (2)
nuget/SixLabors.ImageSharp 0 - 2.1.9NuGet
sixlabors/imagesharp 2.1.0 - 2.1.9
Published Jul 22, 2024
Tracked Since Feb 18, 2026