CVE-2024-34408

Severity: medium (CVSS 5.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2024-05-03 · updated 2026-06-17
Weakness: CWE-122

Description

Tencent libpag through 4.3.51 has an integer overflow in DecodeStream::checkEndOfFile() in codec/utils/DecodeStream.cpp via a crafted PAG (Portable Animated Graphics) file.

Affected products

Tencent Libpag: through 4.3.51

References

https://github.com/Tencent/libpag/issues/2230
https://github.com/Tencent/libpag/pull/2243
https://github.com/Tencent/libpag/issues/2230
https://github.com/Tencent/libpag/pull/2243

Get alerted when CVE-2024-34408 or the next vulnerability affects your stack