PT-2024-25111 · Tencent · Tencent Libpag

CVE-2024-33078

Published

2024-05-01

Updated

2025-09-15

CVSS v3.1

9.8

Critical

Vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Tencent Libpag version 4.3

Description The issue allows a user to send a crafted image to trigger a buffer overflow, which can lead to remote code execution.

Recommendations For Tencent Libpag version 4.3, update to a version that fixes the buffer overflow issue to prevent remote code execution.

Exploit

Fix

RCE

Found an issue in the description? Have something to add? Feel free to write us 👾

CVE-2024-33078

Tencent Libpag