~ / search / GHSA-rxg9-xrhp-64gj

GHSA-rxg9-xrhp-64gj

.NET Core Remote Code Execution Vulnerability

Source: GitHub Advisory Database (reviewed) Critical CVE-2021-24112

Packages

EcosystemPackageAffectedFixed in
NuGet System.Drawing.Common >= 4.0.0, < 4.7.2 4.7.2
NuGet System.Drawing.Common >= 5.0.0, < 5.0.3 5.0.3

Details

As written in the advisory (Markdown source, shown as plain text).

A remote code execution vulnerability exists when parsing certain types of graphics files. This vulnerability only exists on systems running on MacOS or Linux. This CVE ID is unique from CVE-2021-26701.

References

External links from the advisory. They lead to third-party sites.