Lucene search
K

69 matches found

Positive Technologies
Positive Technologies
added 2024/04/15 12:0 a.m.2 views

PT-2024-24370 · Unknown · Imagesharp

Name of the Vulnerable Software and Affected Versions: ImageSharp versions prior to 2.1.8 ImageSharp versions prior to 3.1.4 Description: A vulnerability discovered in the ImageSharp library can lead to excessive memory usage in image decoders when processing specially crafted files. This flaw ca...

6.5CVSS7AI score0.00202EPSS
Exploits0References13
NVD
NVD
added 2024/03/05 5:15 p.m.7 views

CVE-2024-27929

ImageSharp is a managed, cross-platform, 2D graphics library. A heap-use-after-free flaw was found in ImageSharp's InitializeImage function of PngDecoderCore.cs file. This vulnerability is triggered when an attacker passes a specially crafted PNG image file to ImageSharp for conversion, potential...

7.1CVSS6.6AI score0.00057EPSS
Exploits1References1
Prion
Prion
added 2024/03/05 5:15 p.m.15 views

Information disclosure

ImageSharp is a managed, cross-platform, 2D graphics library. A heap-use-after-free flaw was found in ImageSharp's InitializeImage function of PngDecoderCore.cs file. This vulnerability is triggered when an attacker passes a specially crafted PNG image file to ImageSharp for conversion, potential...

3.3CVSS6.5AI score0.00057EPSS
Exploits1References1
CVE
CVE
added 2024/03/05 4:30 p.m.69 views

CVE-2024-27929

SixLabors.ImageSharp is affected by a heap-use-after-free in InitializeImage() within PngDecoderCore.cs when processing specially crafted PNG files, potentially leading to information disclosure. The issue affects ImageSharp versions prior to 3.1.3 and 2.1.7. Remediation in the public CVE context...

7.1CVSS6.5AI score0.00057EPSS
Exploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/03/05 4:30 p.m.16 views

CVE-2024-27929 Use After Free in SixLabors.ImageSharp

ImageSharp is a managed, cross-platform, 2D graphics library. A heap-use-after-free flaw was found in ImageSharp's InitializeImage function of PngDecoderCore.cs file. This vulnerability is triggered when an attacker passes a specially crafted PNG image file to ImageSharp for conversion, potential...

7.1CVSS6.3AI score0.00057EPSS
Exploits1References1
OSV
OSV
added 2024/03/05 4:30 p.m.3 views

CVE-2024-27929 Use After Free in SixLabors.ImageSharp

ImageSharp is a managed, cross-platform, 2D graphics library. A heap-use-after-free flaw was found in ImageSharp's InitializeImage function of PngDecoderCore.cs file. This vulnerability is triggered when an attacker passes a specially crafted PNG image file to ImageSharp for conversion, potential...

7.1CVSS6.3AI score0.00057EPSS
Exploits1References3
Github Security Blog
Github Security Blog
added 2024/03/05 4:26 p.m.20 views

Use After Free in SixLabors.ImageSharp

Impact A heap-use-after-free flaw was found in ImageSharp's InitializeImage function of PngDecoderCore.cs file. This vulnerability is triggered when an attacker passes a specially crafted PNG image file to ImageSharp for conversion, potentially leading to information disclosure. Patches The probl...

7.1CVSS6.7AI score0.00057EPSS
Exploits1References4Affected Software1
CNNVD
CNNVD
added 2024/03/05 12:0 a.m.3 views

ImageSharp Security Vulnerability

ImageSharp is a new, full-featured, fully managed, cross-platform 2D graphics API from ImageSharp, Inc. A security vulnerability exists in ImageSharp versions prior to v3.1.3, which stems from a post-release reuse vulnerability in ImageSharp's InitializeImage function in the PngDecoderCore.cs fil...

7.1CVSS6.7AI score0.00057EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2024/03/05 12:0 a.m.3 views

PT-2024-22143 · Unknown · Imagesharp

Name of the Vulnerable Software and Affected Versions: ImageSharp versions prior to 2.1.7 ImageSharp versions prior to 3.1.3 Description: A heap-use-after-free flaw was found in ImageSharp's InitializeImage function of PngDecoderCore.cs file. This issue is triggered when an attacker passes a...

7.1CVSS6.8AI score0.00057EPSS
Exploits1References11
Rows per page
Query Builder