931 matches found
FreeImage 安全漏洞
FreeImage is a cross-platform open source library for supporting popular graphic image formats. A buffer overflow vulnerability exists in the FreeImage psdThumbnail::Read function, which can be exploited by an attacker to run arbitrary code by opening a specially crafted psd file...
CVE-2020-24295
CVE-2020-24295 is a Buffer Overflow in FreeImage 3.19.0 (PSDParser.cpp::ReadImageLine) that enables remote code execution via crafted PSD files. Connected sources confirm the affected component and root cause, and OSV/ Fedora advisories indicate a security update addressing this CVE (alongside ot...
FreeImage 代码问题漏洞
FreeImage is a cross-platform open source library for supporting popular graphic image formats. A denial of service vulnerability exists in the FreeImage FreeImageCloneTag function. An attacker can exploit this vulnerability to cause a denial of service...
CVE-2021-40263
A heap overflow vulnerability in FreeImage 1.18.0 via the ofLoad function in PluginTIFF.cpp...
CVE-2021-40264
NULL pointer dereference vulnerability in FreeImage before 1.18.0 via the FreeImageCloneTag function inFreeImageTag.cpp...
PT-2023-11667 · Freeimage +1 · Freeimage +1
Name of the Vulnerable Software and Affected Versions: FreeImage version 3.19.0 Description: A Buffer Overflow issue exists in the load function in PluginICO.cpp, allowing remote attackers to run arbitrary code via the opening of crafted ico files. Recommendations: For FreeImage version 3.19.0, a...
CVE-2021-40266
FreeImage prior to v1.18.0 contains a null pointer dereference in ReadPalette() within PluginTIFF.cpp (CVE-2021-40266). The CVE affects FreeImage and is reflected in multiple advisories (OSV, Nessus/NASL feeds) linking to downstream fixes; upgrading to 1.18.0+ is the documented remedy in the OSV ...
CVE-2021-40265
CVE-2021-40265 describes a heap overflow in FreeImage prior to 1.18.0, triggered via the ofLoad function in PluginJPEG.cpp. Affected component is the FreeImage library’s JPEG loader; the root cause is a heap overflow vulnerability in ofLoad. Impact is high (as indicated by CVSS in the reference s...
CVE-2021-40264
NULL pointer dereference vulnerability in FreeImage before 1.18.0 via the FreeImageCloneTag function inFreeImageTag.cpp...
CVE-2020-24293
Buffer Overflow vulnerability in psdThumbnail::Read in PSDParser.cpp in FreeImage 3.19.0 r1859 allows remote attackers to run arbitrary code via opening of crafted psd file...
CVE-2020-24295
Buffer Overflow vulnerability in PSDParser.cpp::ReadImageLine in FreeImage 3.19.0 r1859 allows remote attackers to ru narbitrary code via use of crafted psd file...
CVE-2021-40266
FreeImage before 1.18.0, ReadPalette function in PluginTIFF.cpp is vulnerabile to null pointer dereference...
CVE-2020-21426
Buffer Overflow vulnerability in function CIStream::read in PluginEXR.cpp in FreeImage 3.18.0 allows remote attackers to run arbitrary code and cause other impacts via crafted image file...
CVE-2020-21426
Buffer Overflow vulnerability in function CIStream::read in PluginEXR.cpp in FreeImage 3.18.0 allows remote attackers to run arbitrary code and cause other impacts via crafted image file...
FreeImage 安全漏洞
FreeImage is a cross-platform open source library for supporting popular graphic image formats. A buffer overflow vulnerability exists in the FreeImage LoadRGB function, which originates from a boundary error in the LoadRGB function of the PluginDDS.cpp file when handling untrusted input. An...
FreeImage 代码问题漏洞
FreeImage is a cross-platform open source library for supporting popular graphic image formats. A denial of service vulnerability exists in FreeImage, which stems from a null pointer dereference issue in the ReadPalette method of the PluginTIFF.cpp file. An attacker could exploit this vulnerabili...
CVE-2021-40266
FreeImage before 1.18.0, ReadPalette function in PluginTIFF.cpp is vulnerabile to null pointer dereference...
FreeImage 缓冲区错误漏洞
FreeImage is a cross-platform open source library for supporting popular graphic image formats. A denial of service vulnerability exists in FreeImage, which stems from a stack exhaustion issue in the Validate method of the PluginRAW.cpp file. An attacker could exploit this vulnerability to cause ...