CVE-2024-34408

Tencent libpag (an official rendering library for PAG files) versions through 4.3.51 are vulnerable to an integer overflow . The flaw exists in the DecodeStream::checkEndOfFile() function within codec/utils/DecodeStream.cpp, where the software fails to correctly handle associated integers when pr...

CVE-2024-33078

Tencent Libpag version 4.3 , an animation library, is vulnerable to a buffer overflow (specifically noted as an integer overflow leading to a buffer overflow). An attacker can exploit this by sending a crafted image or a special request , which may cause the application to crash or allow for remo...