931 matches found
PT-2024-22477 · Freeimage +1 · Freeimage +1
Name of the Vulnerable Software and Affected Versions: FreeImage version 3.19.0 Description: The issue allows a local attacker to cause a denial of service DoS via the opj j2k copy default tcp and create tcd function when reading images in J2K format. Recommendations: For FreeImage version 3.19.0...
PT-2024-22487 · Freeimage +1 · Freeimage +1
Name of the Vulnerable Software and Affected Versions: FreeImage version 3.19.0 Description: The issue allows a local attacker to execute arbitrary code via the readLine function when reading images in XPM format. Recommendations: For FreeImage version 3.19.0, consider disabling the readLine...
PT-2024-22488 · Freeimage +1 · Freeimage +1
Name of the Vulnerable Software and Affected Versions: FreeImage version 3.19.0 Description: The issue allows a local attacker to cause a denial of service DoS via the J2KImageToFIBITMAP function when reading images in J2K format. This is a Null Pointer Dereference issue. Recommendations: For...
Fedora 39 : freeimage / mingw-freeimage (2024-c0b61ab46b)
The remote Fedora 39 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2024-c0b61ab46b advisory. Add downstream fixes for CVE-2023-47995 and CVE-2023-47997. Tenable has extracted the preceding description block directly from the Fedora security...
Fedora 38 : freeimage / mingw-freeimage (2024-e6a35cd250)
The remote Fedora 38 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2024-e6a35cd250 advisory. Add downstream fixes for CVE-2023-47995 and CVE-2023-47997. Tenable has extracted the preceding description block directly from the Fedora security...
Ubuntu: Security Advisory (USN-6586-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-6586-1 freeimage vulnerabilities
It was discovered that FreeImage incorrectly handled certain memory operations. If a user were tricked into opening a crafted TIFF file, a remote attacker could use this issue to cause a heap buffer overflow, resulting in a denial of service attack. This issue only affected Ubuntu 16.04 LTS and...
USN-6586-1: FreeImage vulnerabilities
It was discovered that FreeImage incorrectly handled certain memory operations. If a user were tricked into opening a crafted TIFF file, a remote attacker could use this issue to cause a heap buffer overflow, resulting in a denial of service attack. This issue only affected Ubuntu 16.04 LTS and...
Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 / 23.10 : FreeImage vulnerabilities (USN-6586-1)
The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 / 23.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6586-1 advisory. It was discovered that FreeImage incorrectly handled certain memory operations. If a user were tricke...
FreeImage LoadPixelDataRLE4 function integer overflow vulnerability
FreeImage is a cross-platform open source library for supporting popular graphic image formats. An integer overflow vulnerability exists in FreeImage version 3.18.0, which stems from the failure of the LoadPixelDataRLE4 function in the PluginBMP.cpp file to properly handle integer related...
FreeImage FreeImageIO.cpp::_MemoryReadProc function integer overflow vulnerability
FreeImage is a cross-platform open source library for supporting popular graphic image formats. An integer overflow vulnerability exists in FreeImage version 3.18.0, which stems from the failure of the component FreeImageIO.cpp::MemoryReadProc to properly handle operations related to integers. An...
FreeImage Exif.cpp::jpeg_read_exif_dir function integer overflow vulnerability
FreeImage is a cross-platform open source library for supporting popular graphic image formats. An integer overflow vulnerability exists in FreeImage version 3.18.0, which stems from a failure of the component Exif.cpp::jpegreadexifdir to properly handle operations related to integers. An attacke...
FreeImage Out-of-Bounds Read Vulnerability
FreeImage is a cross-platform open source library for supporting popular graphic image formats. An out-of-bounds read vulnerability exists in FreeImage version 3.18.0, which stems from the lack of proper validation of user-supplied data by the component Exif.cpp::ReadInt32, and can be exploited b...
FreeImage buffer overflow vulnerability (CNVD-2024-04884)
FreeImage is a cross-platform open source library for supporting popular graphic image formats. A buffer overflow vulnerability exists in FreeImage version 3.18.0, which stems from the component BitmapAccess.cpp::FreeImageAllocateBitmap failing to correctly validate the length and size of the inp...
FreeImage Denial of Service Vulnerability (CNVD-2024-04885)
FreeImage is a cross-platform open source library for supporting popular graphic image formats. A denial of service vulnerability exists in FreeImage version 3.18.0, which stems from an infinite loop in the component BitmapAccess.cpp::FreeImageAllocateBitmap, and can be exploited by an attacker t...
SUSE CVE-2023-47992
An integer overflow vulnerability in FreeImageIO.cpp::MemoryReadProc in FreeImage 3.18.0 allows attackers to obtain sensitive information, cause a denial-of-service attacks and/or run arbitrary code...
SUSE CVE-2023-47994
An integer overflow vulnerability in LoadPixelDataRLE4 function in PluginBMP.cpp in Freeimage 3.18.0 allows attackers to obtain sensitive information, cause a denial of service and/or run arbitrary code...
SUSE CVE-2023-47995
Memory Allocation with Excessive Size Value discovered in BitmapAccess.cpp::FreeImageAllocateBitmap in FreeImage 3.18.0 allows attackers to cause a denial of service...