FreeImage 安全漏洞

FreeImage is a cross-platform open source library for supporting popular graphic image formats. A buffer overflow vulnerability exists in the FreeImage load function that can be exploited by an attacker to execute arbitrary code on a system or cause a denial of service attack...

CVE-2020-24293

CVE-2020-24293 is a Buffer Overflow in FreeImage 3.19.0 (PSDParser.cpp psdThumbnail::Read) that enables remote code execution when opening crafted PSD files. Connected sources (OSV: OESA-2024-2305 and Fedora advisories) confirm a security update exists; remediation is to apply the FreeImage secur...

PT-2023-12356 · Freeimage +1 · Freeimage +1

Name of the Vulnerable Software and Affected Versions: FreeImage version 1.18.0 Description: A heap overflow issue exists via the ofLoad function in PluginTIFF.cpp. Recommendations: For FreeImage version 1.18.0, at the moment, there is no information about a newer version that contains a fix for...

CVE-2020-24294

The CVE-2020-24294 entry describes a buffer overflow in FreeImage 3.19.0 (r1859) in the PSDParser.cpp function psdParser::UnpackRLE, allowing a remote attacker to cause a denial of service by opening a crafted PSD file. Connected sources confirm the affected component and the DoS impact; no patch...

CVE-2020-24292

Buffer Overflow vulnerability in load function in PluginICO.cpp in FreeImage 3.19.0 r1859 allows remote attackers to run arbitrary code via opening of crafted ico file...

CVE-2020-24294

Buffer Overflow vulnerability in psdParser::UnpackRLE function in PSDParser.cpp in FreeImage 3.19.0 r1859 allows remote attackers to cuase a denial of service via opening of crafted psd file...

CVE-2021-40265

A heap overflow bug exists FreeImage before 1.18.0 via ofLoad function in PluginJPEG.cpp...

CVE-2020-21428

Buffer Overflow vulnerability in function LoadRGB in PluginDDS.cpp in FreeImage 3.18.0 allows remote attackers to run arbitrary code and cause other impacts via crafted image file...

CVE-2021-40262

A stack exhaustion issue was discovered in FreeImage before 1.18.0 via the Validate function in PluginRAW.cpp...

PT-2023-11620 · Unknown +2 · Freeimage Library +2

Name of the Vulnerable Software and Affected Versions: FreeImage Library version 3.19.0r1828 Description: The issue is related to a Buffer Overflow vulnerability in the FreeImage Load function, which allows attackers to cause a denial of service via a crafted PFM file. Recommendations: For...

PT-2023-11587 · Freeimage +2 · Freeimage +2

Name of the Vulnerable Software and Affected Versions: FreeImage version 3.18.0 Description: The issue allows remote attackers to run arbitrary code and cause other impacts via a crafted image file, exploiting a Buffer Overflow vulnerability in the LoadRGB function in PluginDDS.cpp...

PT-2023-11668 · Freeimage +1 · Freeimage +1

Name of the Vulnerable Software and Affected Versions: FreeImage version 3.19.0 Description: The issue allows remote attackers to run arbitrary code via the opening of a crafted psd file. This is due to a Buffer Overflow vulnerability in the psdThumbnail::Read function in PSDParser.cpp...

CVE-2020-21427

Buffer Overflow vulnerability in function LoadPixelDataRLE8 in PluginBMP.cpp in FreeImage 3.18.0 allows remote attackers to run arbitrary code and cause other impacts via crafted image file...

PT-2023-11585 · Freeimage +1 · Freeimage +1

Name of the Vulnerable Software and Affected Versions: FreeImage version 3.18.0 Description: The issue is a Buffer Overflow vulnerability in the function C IStream::read in PluginEXR.cpp. This allows remote attackers to run arbitrary code and cause other impacts via a crafted image file...

FreeImage 安全漏洞

FreeImage is a cross-platform open source library for supporting popular graphic image formats. A buffer overflow vulnerability exists in the FreeImage psdParser::UnpackRLE function, which can be exploited by an attacker to eliminate a denial of service by opening a specially crafted psd file...

CVE-2021-40264

CVE-2021-40264 affects the FreeImage library, where a NULL pointer dereference occurs in FreeImage_CloneTag (FreeImageTag.cpp) before version 1.18.0. The vulnerability is triggered by processing certain tags, leading to an application crash and potential denial of service. CVSS details indicate N...

CVE-2021-40262

A stack exhaustion issue was discovered in FreeImage before 1.18.0 via the Validate function in PluginRAW.cpp...

CVE-2020-24295

Buffer Overflow vulnerability in PSDParser.cpp::ReadImageLine in FreeImage 3.19.0 r1859 allows remote attackers to ru narbitrary code via use of crafted psd file...

CVE-2020-21427

CVE-2020-21427 : A buffer overflow in FreeImage 3.18.0 (LoadPixelDataRLE8 in PluginBMP.cpp) can be triggered by crafted image files, potentially allowing remote code execution. Public reports reference FreeImage vulnerabilities across multiple distributions; Debian advisories note fixes in 3.18.0...

CVE-2020-21426

CVE-2020-21426 is a buffer overflow vulnerability in FreeImage 3.18.0 affecting the C_IStream::read function in PluginEXR.cpp, enabling arbitrary code execution via crafted image files. Connected advisories indicate FreeImage updates in Fedora to 3.19.0 (svn1909) across both mingw-freeimage and f...