Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2024-06177
HistoryJan 12, 2024 - 12:00 a.m.

FreeImage Out-of-Bounds Read Vulnerability

2024-01-1200:00:00
China National Vulnerability Database
www.cnvd.org.cn
5
freeimage
out-of-bounds read
vulnerability
user-supplied data
exploitation

7 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.1%

FreeImage is a cross-platform open source library for supporting popular graphic image formats. An out-of-bounds read vulnerability exists in FreeImage version 3.18.0, which stems from the lack of proper validation of user-supplied data by the component Exif.cpp::ReadInt32, and can be exploited by an attacker to potentially trigger a read beyond the end of the allocated buffer via specially crafted data.

CPENameOperatorVersion
freeimage freeimageeq3.18.0

7 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.1%