CVE-2024-46274

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Oct 1, 2024
Updated: Mar 18, 2025
CWE ID 787

Summary

CVE-2024-46274 is a newly disclosed vulnerability affecting the cute_png library version 1.05. This issue involves a heap buffer overflow that can be exploited through the cp_stored() function located in cute_png.h. Successful exploitation could result in arbitrary code execution, leading to potential security risks and potential system compromise. Users are advised to update to a patched version of the library to mitigate this vulnerability.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share