Vulnerabilities in Package Images Could Lead to Process Crashes

CVE-2024-21523

What is CVE-2024-21523?

The vulnerability allows for Denial of Service in Node Images as all versions are susceptible to unexpected input types, particularly affecting several functions within the package. By sending specific integer values to the size function, such as zero, attackers can trigger an assert macro, resultant in a process crash and subsequent Segmentation fault error. This opens pathways for attackers to disrupt service continuity and exploit the affected systems.

References