PT-2024-25111
CVE-2024-33078
·
Published
2024-05-01
·
Updated
2025-09-15
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Tencent Libpag version 4.3
Description
The issue allows a user to send a crafted image to trigger a buffer overflow, which can lead to remote code execution.
Recommendations
For Tencent Libpag version 4.3, update to a version that fixes the buffer overflow issue to prevent remote code execution.
Found an issue in the description? Have something to add? Feel free to write us 👾