Vulnerability in Sixlabors Imagesharp
CVE-2024-32035
ImageSharp is a 2D graphics API. A vulnerability discovered in the ImageSharp library, where the processing of specially crafted files can lead to excessive memory usage in image decoders. The vulnerability is triggered when ImageSharp att…
EPSS: 0.002 (42.2th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L.
Affected products
- Sixlabors Imagesharp — versions < 2.1.8, >= 3.0.0, < 3.1.4
Weakness classification (CWE)
References
- https://github.com/SixLabors/ImageSharp/security/advisories/GHSA-g85r-6x2q-45w7 (x_refsource_CONFIRM)
- https://github.com/SixLabors/ImageSharp/commit/b6b08ac3e7cea8da5ac1e90f7c0b67dd254535c3 (x_refsource_MISC)
- https://github.com/SixLabors/ImageSharp/commit/f21d64188e59ae9464ff462056a5e29d8e618b27 (x_refsource_MISC)
- https://docs.sixlabors.com/articles/imagesharp.web/processingcommands.html#securing-processing-commands (x_refsource_MISC)
- https://docs.sixlabors.com/articles/imagesharp/security.html (x_refsource_MISC)
Frequently asked questions
- What is CVE-2024-32035?
- CVE-2024-32035 is a medium-severity vulnerability in Sixlabors Imagesharp, classified under CWE-789. CVSS score: 5.3/10. Published 2024-04-15.
- How severe is CVE-2024-32035?
- Medium severity. CVSS v3 base score is 5.3 out of 10.