CVE-2024-25447: 
NixOS vulnerability analysis and mitigation

An issue in the imlib_load_image_with_error_return function of imlib2 v1.9.1 allows attackers to cause a heap buffer overflow via parsing a crafted image. The vulnerability was assigned CVE-2024-25447 and has received a CVSS v3.1 base score of 8.8 (HIGH) with vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H (NVD).

The vulnerability is classified as CWE-787 (Out-of-bounds Write) and affects the imlib_load_image_with_error_return function in imlib2 version 1.9.1. The issue allows attackers to trigger a heap buffer overflow condition when parsing specially crafted image files (NVD, Debian Tracker).

The vulnerability has a high severity rating with potential for complete compromise of system confidentiality, integrity, and availability when successfully exploited. The CVSS score of 8.8 indicates significant potential impact, requiring user interaction for exploitation while potentially affecting all security properties of the target system (NVD).

Fixed versions have been released for various distributions. Debian has addressed the vulnerability in bullseye (1.7.1-2+deb11u1), bookworm (1.10.0-4+deb12u1), and sid/trixie (1.12.3-2). The vulnerability was fixed in imlib2 version 1.10.0 (Debian Tracker).