Libpag

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-34408 MEDIUM POC PATCH This Month

Tencent libpag through 4.3.51 has an integer overflow in DecodeStream::checkEndOfFile() in codec/utils/DecodeStream.cpp via a crafted PAG (Portable Animated Graphics) file. Rated medium severity (CVSS 5.3), this vulnerability is low attack complexity. Public exploit code available.

Heap Overflow Buffer Overflow Libpag

NVD GitHub

CVSS 3.1

5.3

EPSS

0.2%

CVE-2024-33078 CRITICAL Act Now

Tencent Libpag v4.3 is vulnerable to Buffer Overflow. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Libpag

NVD GitHub

CVSS 3.1

9.8

EPSS

1.1%

CVE-2024-34408

EPSS 0% CVSS 5.3

MEDIUM POC PATCH This Month

Heap Overflow Buffer Overflow Libpag

NVD GitHub

CVE-2024-33078

EPSS 1% CVSS 9.8

CRITICAL Act Now

RCE Buffer Overflow Libpag

NVD GitHub