CVE-2020-24293

Buffer Overflow vulnerability in psdThumbnail::Read in PSDParser.cpp in FreeImage 3.19.0 r1859 allows remote attackers to run arbitrary code via opening of crafted psd file...

CVE-2020-24294

Buffer Overflow vulnerability in psdParser::UnpackRLE function in PSDParser.cpp in FreeImage 3.19.0 r1859 allows remote attackers to cuase a denial of service via opening of crafted psd file...

CVE-2020-24295

Buffer Overflow vulnerability in PSDParser.cpp::ReadImageLine in FreeImage 3.19.0 r1859 allows remote attackers to ru narbitrary code via use of crafted psd file...

CVE-2020-24292

Buffer Overflow vulnerability in load function in PluginICO.cpp in FreeImage 3.19.0 r1859 allows remote attackers to run arbitrary code via opening of crafted ico file...

CVE-2020-21426

Buffer Overflow vulnerability in function CIStream::read in PluginEXR.cpp in FreeImage 3.18.0 allows remote attackers to run arbitrary code and cause other impacts via crafted image file...

CVE-2020-22524

Buffer Overflow vulnerability in FreeImageLoad function in FreeImage Library 3.19.0r1828 allows attackers to cuase a denial of service via crafted PFM file...

CVE-2020-21427

Buffer Overflow vulnerability in function LoadPixelDataRLE8 in PluginBMP.cpp in FreeImage 3.18.0 allows remote attackers to run arbitrary code and cause other impacts via crafted image file...

CVE-2021-40263

CVE-2021-40263 is a heap overflow vulnerability in FreeImage 1.18.0 triggered by the ofLoad function in PluginTIFF.cpp. The issues are documented across multiple sources confirming the vulnerability resides in FreeImage’s TIFF loading path and can lead to arbitrary code execution or memory corrup...

CVE-2021-40266

FreeImage prior to v1.18.0 contains a null pointer dereference in ReadPalette() within PluginTIFF.cpp (CVE-2021-40266). The CVE affects FreeImage and is reflected in multiple advisories (OSV, Nessus/NASL feeds) linking to downstream fixes; upgrading to 1.18.0+ is the documented remedy in the OSV ...

CVE-2021-40265

CVE-2021-40265 describes a heap overflow in FreeImage prior to 1.18.0, triggered via the ofLoad function in PluginJPEG.cpp. Affected component is the FreeImage library’s JPEG loader; the root cause is a heap overflow vulnerability in ofLoad. Impact is high (as indicated by CVSS in the reference s...

CVE-2021-40262

The CVE-2021-40262 vulnerability affects FreeImage prior to 1.18.0, caused by a stack exhaustion issue in the Validate function within PluginRAW.cpp. This is described across multiple sources (CNVD, Debian OSV, NVD, Ubuntu/Ubuntucve, etc.) as a denial-of-service risk due to consuming stack resour...

CVE-2020-24295

CVE-2020-24295 is a Buffer Overflow in FreeImage 3.19.0 (PSDParser.cpp::ReadImageLine) that enables remote code execution via crafted PSD files. Connected sources confirm the affected component and root cause, and OSV/ Fedora advisories indicate a security update addressing this CVE (alongside ot...

CVE-2020-24292

CVE-2020-24292 is a buffer overflow in FreeImage 3.19.0’s PluginICO.cpp load function that can allow remote code execution when opening a crafted ICO file. The OSV entry for OESA-2024-2305 notes a security update for FreeImage 3.19.0 addressing this (and other CVEs), indicating a patched release ...

CVE-2020-24294

The CVE-2020-24294 entry describes a buffer overflow in FreeImage 3.19.0 (r1859) in the PSDParser.cpp function psdParser::UnpackRLE, allowing a remote attacker to cause a denial of service by opening a crafted PSD file. Connected sources confirm the affected component and the DoS impact; no patch...

CVE-2020-24293

CVE-2020-24293 is a Buffer Overflow in FreeImage 3.19.0 (PSDParser.cpp psdThumbnail::Read) that enables remote code execution when opening crafted PSD files. Connected sources (OSV: OESA-2024-2305 and Fedora advisories) confirm a security update exists; remediation is to apply the FreeImage secur...

CVE-2020-22524

CVE-2020-22524 is a buffer overflow in FreeImage_Load used when processing PFM files in FreeImage Library (3.19.0). Exploitation could trigger denial of service. Connected advisories (Debian DSA-5579/DLA-3662, Ubuntu USN 6586-1, OpenVAS entries) confirm FreeImage vulnerabilities affecting multipl...

CVE-2021-40264

CVE-2021-40264 affects the FreeImage library, where a NULL pointer dereference occurs in FreeImage_CloneTag (FreeImageTag.cpp) before version 1.18.0. The vulnerability is triggered by processing certain tags, leading to an application crash and potential denial of service. CVSS details indicate N...

CVE-2020-21426

CVE-2020-21426 is a buffer overflow vulnerability in FreeImage 3.18.0 affecting the C_IStream::read function in PluginEXR.cpp, enabling arbitrary code execution via crafted image files. Connected advisories indicate FreeImage updates in Fedora to 3.19.0 (svn1909) across both mingw-freeimage and f...

CVE-2020-21427

CVE-2020-21427 : A buffer overflow in FreeImage 3.18.0 (LoadPixelDataRLE8 in PluginBMP.cpp) can be triggered by crafted image files, potentially allowing remote code execution. Public reports reference FreeImage vulnerabilities across multiple distributions; Debian advisories note fixes in 3.18.0...

CVE-2020-21428

CVE-2020-21428 affects FreeImage (library for graphics image formats). The vulnerability is a buffer overflow in function LoadRGB in PluginDDS.cpp, triggered by crafted image files, enabling remote code execution. Evidence across multiple advisories confirms FreeImage-related CVEs (including CVE-...