cve.bz

CVE-2024-32036

6.5 mediumEPSS 0.6%

Medium (6.5) in sixlabors imagesharp. EPSS 0.6% chance of exploitation in the next 30 days.

ImageSharp is a 2D graphics API. A data leakage flaw was found in ImageSharp's JPEG and TGA decoders. This vulnerability is triggered when an attacker passes a specially crafted JPEG or TGA image file to a software using ImageSharp, potentially disclosing sensitive information from other parts of the software in the resulting image buffer. The problem has been patched in v3.1.4 and v2.1.8.

Severity

CVSS 3.1

6.5 medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
EPSS
0.6% chance of exploitation in the next 30 days; higher than 47% of CVEs (scores of 2026-10-31)
CWEs
CWE-212, CWE-226
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON