CVE-2024-49749
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Jan 21, 2025
Updated: Jan 22, 2025
CWE ID 787
Summary
CVE-2024-49749 is a newly identified vulnerability affecting the DGifSlurp function in dgif_lib.c. This issue arises due to an integer overflow, leading to a possible out-of-bounds write. The consequence of this vulnerability is severe, enabling remote code execution, making it a critical threat. Notably, no additional execution privileges or user interaction are required for an attacker to exploit this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.