PT-2024-35971 · Imager+1 · Imager+1

·

CVE-2024-53901

·

Published

2024-11-24

·

Updated

2024-11-26

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions: Imager package versions prior to 1.025
Description: The issue is a heap-based buffer overflow that can lead to denial of service or possibly other unspecified impacts when the trim() method is called on a crafted input image.
Recommendations: For versions prior to 1.025, update to version 1.025 or later to resolve the issue. As a temporary workaround, consider avoiding the use of the trim() method on untrusted input images until the update is applied.

Exploit

Fix

DoS

Memory Corruption

Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2024-53901

Affected Products

Debian
Imager