GitHub Advisoryadvisory · NuGet

GHSA-rxg9-xrhp-64gj .NET Core Remote Code Execution Vulnerability

CRITICAL Published 2022-05-24 Modified 2022-10-25 Official page ↗
Aliases
CVE-2021-24112
Ecosystem
NuGet
Packages
System.Drawing.Common
Severity
Critical
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Reviewed
2022-10-25

Affected packages

• NuGet System.Drawing.Common: >= 4.0.0, < 4.7.2 → fixed in 4.7.2 • NuGet System.Drawing.Common: >= 5.0.0, < 5.0.3 → fixed in 5.0.3

Description

A remote code execution vulnerability exists when parsing certain types of graphics files. This vulnerability only exists on systems running on MacOS or Linux. This CVE ID is unique from CVE-2021-26701.

Related

Alias · CVE (1)

  • CVE-2021-24112 .NET Core Remote Code Execution Vulnerability vulnerability

References