CVE-2024-46267
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Oct 1, 2024
Updated: Mar 18, 2025
CWE ID 787
Summary
CVE-2024-46267 is a newly disclosed vulnerability affecting the cute_png library version 1.05. This issue involves a heap buffer overflow, which can be triggered by maliciously crafted input using the cp_block() function defined in cute_png.h. Successful exploitation may lead to arbitrary code execution or memory corruption, posing a significant risk to systems that use this library. Users are advised to update to the latest version of cute_png as soon as possible to mitigate this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.