CVE-2024-34408

MEDIUM 5.3CVE-2024-34408 · Published 03/05/2024 · updated 17/06/2026

In short

CVE-2024-34408 is a MEDIUM (CVSS 5.3) vulnerability affecting libpag (tencent).
Chance of exploitation in the next 30 days (EPSS): 0.24%, higher than 15.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
libpag tencent	`≤ 4.3.51`	No fix yet

Description

Tencent libpag through 4.3.51 has an integer overflow in DecodeStream::checkEndOfFile() in codec/utils/DecodeStream.cpp via a crafted PAG (Portable Animated Graphics) file.

References

Tencent/libpag · Exploit
Tencent/libpag#2243 · Issue Tracking

More vulnerabilities in libpag

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free