ImageSharp is a 2D graphics API. An Out-of-bounds Write vulnerability has been found in the ImageSharp gif decoder, allowing attackers to cause a crash using a specially crafted gif. This can potentially lead to denial of service. All users are advised to upgrade to v3.1.5 or v2.1.9.
{
"cna_assigner": "GitHub_M",
"cwe_ids": [
"CWE-787"
],
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/41xxx/CVE-2024-41131.json"
}{
"extracted_events": [
{
"cpe": "cpe:2.3:a:sixlabors:imagesharp:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.1.0"
},
{
"fixed": "2.1.9"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:sixlabors:imagesharp:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "3.1.0"
},
{
"fixed": "3.1.5"
}
],
"source": "CPE_RANGE"
},
{
"range": [
{
"fixed": "9dda64a8186af67baf06b6d9c1ab599c3608b693"
}
],
"source": "REFERENCES_COMMIT"
},
{
"range": [
{
"fixed": "a1f287977139109a987065643b8172c748abdadb"
}
],
"source": "REFERENCES_COMMIT"
}
]
}