Security Advisory

CVE-2024-32036

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2024-04-15 20:08:44
Last updated 2024-08-02 02:06:42
Assigner GitHub_M
CVSS score 5.3
State PUBLISHED

Description

ImageSharp is a 2D graphics API. A data leakage flaw was found in ImageSharp's JPEG and TGA decoders. This vulnerability is triggered when an attacker passes a specially crafted JPEG or TGA image file to a software using ImageSharp, potentially disclosing sensitive information from other parts of the software in the resulting image buffer. The problem has been patched in v3.1.4 and v2.1.8.