VULNERABILITY INTELLIGENCE

CVE-2024-49749

CVSS score8.8 HIGH

EPSS probability0.25%

CISA KEVNot currently listed

Published2025-01-21

Last modified2026-06-17

Description

In DGifSlurp of dgif_lib.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.