CVE-2024-46263

cute_png v1.05 was discovered to contain a stack overflow via the cp_dynamic() function at cute_png.h.

Score

CVSS 3.1 7.8 High

Status

Modified - cve@mitre.org

Published

2024-10-01

Last modified

2025-03-18

Weaknesses

CWE-787

Affected products

• Cute Png (Cute Png)
• Cute Png (Randygaul)

References

• https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/stkof-w1-cp_dynamic-cute_png-601c71
• https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/stkof-w1-cp_dynamic-cute_png-601c71/poc
• https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/stkof-w1-cp_dynamic-cute_png-601c71/poc/samp…
• https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/stkof-w1-cp_dynamic-cute_png-601c71/vulDescr…
• https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/stkof-w1-cp_dynamic-cute_png-601c71/vulDescr…