Lucene search

PRIOn knowledge basePRION:CVE-2020-21427

HistoryAug 22, 2023 - 7:16 p.m.

Buffer overflow

2023-08-2219:16:00

PRIOn knowledge base

www.prio-n.com

buffer overflow

freeimage 3.18.0

pluginbmp.cpp

remote attackers

arbitrary code

crafted image file

nvd

7.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.6%

JSON

Buffer Overflow vulnerability in function LoadPixelDataRLE8 in PluginBMP.cpp in FreeImage 3.18.0 allows remote attackers to run arbitrary code and cause other impacts via crafted image file.

CPENameOperatorVersion
freeimageeq3.18.0

CPE	Name	Operator	Version
	freeimage	eq	3.18.0

References

lists.debian.org/debian-lts-announce/2023/11/msg00020.html

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RUEK2JOVJBQZVNQIIZZO3JFMTVB4R5KS/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UGOMCRAANNCQYJYPPMGRQWKRZGIP6NME/

sourceforge.net/p/freeimage/bugs/298/

www.debian.org/security/2023/dsa-5579