PT-2025-2860

CVE-2024-49749

·

Published

2025-01-01

·

Updated

2025-03-20

Description by

CVSS 3.1
8.8
High
MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions dgif lib.c (affected versions not specified)
Description The issue is related to a possible out of bounds write due to an integer overflow in DGifSlurp of dgif lib.c. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. The overflow occurs when ImageDesc.Width and ImageDesc.Height are larger than SIZE MAX, causing ImageSize to overflow.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Vendors
Affected products
Weakness enumeration
Related identifiers
ASB-A-355461643
Found an issue in the description? Have something to add? Feel free to write us 👾