Tencent/libpag

Tencent/libpag

GitHubGitHub
GitHubgithub.com
pag.iopag.io
Releases80
Frequency3 weeks 5 days
Last Release
Stars5.74K
The official rendering library for PAG (Portable Animated Graphics) files that renders After Effects animations natively across multiple platforms.
Log in to subscribe

CVE History

CVEAffectedPublishedCVSS v3CVSS v2
CVE-2024-34408NVD↗
<= 4.3.515.3 MEDIUM—

Tencent libpag through 4.3.51 has an integer overflow in DecodeStream::checkEndOfFile() in codec/utils/DecodeStream.cpp via a crafted PAG (Portable Animated Graphics) file.

CVE-2024-33078NVD↗
= 4.39.8 CRITICAL—

Tencent Libpag v4.3 is vulnerable to Buffer Overflow. A user can send a crafted image to trigger a overflow leading to remote code execution.