CVE-2026-24799 — A heap-based buffer over-read or buffer overflow in davisking/dlib

CVE-2026-24799

A heap-based buffer over-read or buffer overflow in davisking/dlib PUBLISHED

Description (CNA)

Out-of-bounds Write, Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in davisking dlib (dlib/external/zlib modules). This vulnerability is associated with program files inflate.C. This issue affects dlib: before v19.24.9.

Affected (CNA)

Vendor / product	Versions
davisking / dlib	affected 0 before v19.24.9

CWE

CWE-787, CWE-120

References

https://github.com/davisking/dlib/pull/3063

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.