ImageSharp is a 2D graphics API. A data leakage flaw was found in ImageSharp's JPEG and TGA decoders. This vulnerability is triggered when an attacker passes a specially crafted JPEG or TGA image file to a software using ImageSharp, potentially disclosing sensitive information from other parts of the software in the resulting image buffer. The problem has been patched in v3.1.4 and v2.1.8.
References
Configurations
No configuration.
History
21 Nov 2024, 09:14
Type | Values Removed | Values Added |
---|---|---|
References | () https://github.com/SixLabors/ImageSharp/commit/8f0b4d3e680e78d479a88e7b1472bccd8f096d68 - | |
References | () https://github.com/SixLabors/ImageSharp/commit/da5f09a42513489fe359578d81cec2f15ba588ba - | |
References | () https://github.com/SixLabors/ImageSharp/security/advisories/GHSA-5x7m-6737-26cr - |
16 Apr 2024, 23:15
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.3 |
16 Apr 2024, 22:15
Type | Values Removed | Values Added |
---|---|---|
CWE | ||
Summary | (en) ImageSharp is a 2D graphics API. A data leakage flaw was found in ImageSharp's JPEG and TGA decoders. This vulnerability is triggered when an attacker passes a specially crafted JPEG or TGA image file to a software using ImageSharp, potentially disclosing sensitive information from other parts of the software in the resulting image buffer. The problem has been patched in v3.1.4 and v2.1.8. |
16 Apr 2024, 13:24
Type | Values Removed | Values Added |
---|---|---|
Summary |
|
15 Apr 2024, 20:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-04-15 20:15
Updated : 2024-11-21 09:14
NVD link : CVE-2024-32036
Mitre link : CVE-2024-32036
CVE.ORG link : CVE-2024-32036
JSON object : View
Products Affected
No product.
CWE
CWE-226
Sensitive Information in Resource Not Removed Before Reuse