Unknown · Imagesharp · CVE-2024-41132
Name of the Vulnerable Software and Affected Versions:
ImageSharp versions prior to 3.1.5
ImageSharp versions prior to 2.1.9
Description:
A vulnerability in the ImageSharp library can lead to excessive memory usage in the Gif decoder when processing specially crafted files. This issue is triggered when ImageSharp attempts to process image files designed to exploit this flaw. The vulnerability may allow a remote attacker to cause a denial of service.
Recommendations:
For versions prior to 3.1.5, upgrade to v3.1.5.
For versions prior to 2.1.9, upgrade to v2.1.9.
As a temporary workaround, before calling `Image.Decode(Async)`, use `Image.Identify` to determine the image dimensions in order to enforce a limit.