CVE-2024-32036

Publication date

2024-04-15 20:08:44

Family

GitHub_M

State

PUBLISHED

Description

ImageSharp is a 2D graphics API. A data leakage flaw was found in ImageSharps JPEG and TGA decoders. This vulnerability is triggered when an attacker passes a specially crafted JPEG or TGA image file to a software using ImageSharp, potentially disclosing sensitive information from other parts of the software in the resulting image buffer. The problem has been patched in v3.1.4 and v2.1.8.