CVE-2024-41438

🗓️ 30 Jul 2024 00:00:00Reported by MendType

mend🔗 www.mend.io👁 2 Views

Heap buffer overflow in hicolor cp_stored() allows DoS via a crafted PNG file.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2024-41438	30 Jul 202422:26	–	circl
CNNVD	HiColor 安全漏洞	30 Jul 202400:00	–	cnnvd
CVE	CVE-2024-41438	30 Jul 202400:00	–	cve
Cvelist	CVE-2024-41438	30 Jul 202400:00	–	cvelist
NVD	CVE-2024-41438	30 Jul 202419:15	–	nvd
Positive Technologies	PT-2024-29399 · Hicolor · Hicolor	30 Jul 202400:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2024-41438: Heap-based Buffer Overflow	30 Jul 202400:00	–	rapid7
RedhatCVE	CVE-2024-41438	9 Jan 202609:33	–	redhatcve
Vulnrichment	CVE-2024-41438	30 Jul 202400:00	–	vulnrichment

Source	Link
github	www.github.com/Helson-S/FuzzyTesting/blob/master/hicolor/heapof-r65280-cp_stored-cute_png-543c2/vulDescription.assets/image-20240530184848743.png
github	www.github.com/Helson-S/FuzzyTesting/tree/master/hicolor/heapof-r65280-cp_stored-cute_png-543c2/poc
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-41438
github	www.github.com/Helson-S/FuzzyTesting/blob/master/hicolor/heapof-r65280-cp_stored-cute_png-543c2
github	www.github.com/Helson-S/FuzzyTesting/blob/master/hicolor/heapof-r65280-cp_stored-cute_png-543c2/vulDescription.md
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2024/41xxx/CVE-2024-41438.json
github	www.github.com/Helson-S/FuzzyTesting/blob/master/hicolor/heapof-r65280-cp_stored-cute_png-543c2/vulDescription.assets/image-20240530185015780.png
github	www.github.com/Helson-S/FuzzyTesting/tree/master/hicolor/heapof-r65280-cp_stored-cute_png-543c2/poc/sample10.png
github	www.github.com/Helson-S/FuzzyTesting/blob/master/hicolor/heapof-r65280-cp_stored-cute_png-543c2/vulDescription.assets/image-20240530184723547.png

07 Oct 2026 02:16Current

CVSS 3.16.2

CVSS 46.9

EPSS0.00835

SSVC

hicolor cp_stored()heap buffer overflow Denial of Service PNG file