What is CVE-2024-32035?

CVE-2024-32035 is a medium-severity vulnerability in Sixlabors Imagesharp, classified under CWE-789. CVSS score: 5.3/10. Published 2024-04-15.

How severe is CVE-2024-32035?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Resource exhaustion in Sixlabors Imagesharp

CVE-2024-32035

ImageSharp is a 2D graphics API. A vulnerability discovered in the ImageSharp library, where the processing of specially crafted files can lead to excessive memory usage in image decoders. The vulnerability is triggered when ImageSharp attempts to process image files that are designed to exploit this flaw. This flaw can be exploited to cause a denial of service (DoS) by depleting process memory, thereby affecting applications and services that rely on ImageSharp for image processing tasks. Users and administrators are advised to update to the latest version of ImageSharp that addresses this vulnerability to mitigate the risk of exploitation. The problem has been patched in v3.1.4 and v2.1.8.

Published 2024-04-15 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L.

EPSS exploit prediction

EPSS: 0.006 (48.1th percentile), scored 2026-09-30.

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 48th percentile — 48.1% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.006 · newest: 0.006 · change: 0.000

Affected products

Sixlabors Imagesharp — versions < 2.1.8, >= 3.0.0, < 3.1.4

Weakness classification (CWE)

References

Frequently asked questions

What is CVE-2024-32035?: CVE-2024-32035 is a medium-severity vulnerability in Sixlabors Imagesharp, classified under CWE-789. CVSS score: 5.3/10. Published 2024-04-15.
How severe is CVE-2024-32035?: Medium severity. CVSS v3 base score is 5.3 out of 10.