Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-67113
HistoryAug 25, 2023 - 12:00 a.m.

FreeImage C_IStream::read function buffer overflow vulnerability

2023-08-2500:00:00
China National Vulnerability Database
www.cnvd.org.cn
8
freeimage
buffer overflow
c_istream
pluginexr.cpp
boundary error
untrusted input
arbitrary code
denial of service

EPSS

0.001

Percentile

39.3%

FreeImage is a cross-platform open source library for supporting popular graphic image formats. A buffer overflow vulnerability exists in the FreeImage C_IStream::read function, which originates from a boundary error in the C_IStream::read function of the PluginEXR.cpp file when handling untrusted input. An attacker could exploit this vulnerability to execute arbitrary code on the system or cause a denial of service attack.