CVE-2024-46264
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Oct 1, 2024
Updated: Mar 13, 2025
CWE ID 787
CWE ID 122
Summary
CVE-2024-46264 is a newly disclosed vulnerability affecting the cute_png library version 1.05. This issue involves a heap buffer overflow, which can be exploited via the cp_find() function defined in cute_png.h. An attacker could potentially craft a specially crafted PNG image file to trigger the buffer overflow, resulting in arbitrary code execution or denial-of-service conditions. This vulnerability poses a significant risk to applications using the affected library and demands prompt patching to mitigate potential threats.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.