CVE-2024-25446
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Feb 9, 2024
Updated: Feb 20, 2024
CWE ID 787
Summary
CVE-2024-25446 is a newly disclosed vulnerability affecting Hugin v2022.0.0. This issue resides in the HuginBase::PTools::setDestImage function, which allows malicious actors to trigger a heap buffer overflow by parsing a specially crafted image. Successful exploitation could lead to arbitrary code execution, resulting in potential security compromises. Users are advised to update to a patched version of Hugin as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share