CVE-2019-12213

FreeImage library (3.18.0 affected in FreeImage 3.18.0 and earlier) contains TIFF handling flaws in PluginTIFF.cpp that lead to: (1) CVE-2019-12211 — heap overflow during memcpy in Load, enabling possible DoS or other impact; and (2) CVE-2019-12213 — stack exhaustion due to recursion in TIFF proc...

CVE-2019-12211

CVE-2019-12211 affects the FreeImage library (notably up to 3.18.0, with fixes in later package updates) where a memcpy in PluginTIFF.cpp can cause a heap overflow when processing TIFF data. This is a remote-attack surface that could lead to denial of service as described in multiple advisories. ...

CVE-2025-70968

The FreeImage graphics library (version 3.18.0 ) contains a Use After Free vulnerability in the loadRLE() function within PluginTARGA.cpp. This flaw occurs when processing a specially crafted TGA image with RLE compression enabled, potentially allowing a remote attacker to cause a service failure...

CVE-2024-31570

CVE-2024-31570 affects libfreeimage in FreeImage 3.4.0 through 3.18.0, where a stack-based buffer overflow occurs in PluginXPM.cpp Load when processing XPM files. The issue is triggered by a crafted XPM input and is rated critical (CVSS v3.1: 9.8, NETWORK, LOW complexity, no user interaction). Af...

CVE-2020-21427

CVE-2020-21427 : A buffer overflow in FreeImage 3.18.0 (LoadPixelDataRLE8 in PluginBMP.cpp) can be triggered by crafted image files, potentially allowing remote code execution. Public reports reference FreeImage vulnerabilities across multiple distributions; Debian advisories note fixes in 3.18.0...

CVE-2023-47995

CVE-2023-47995 is a memory-allocation vulnerability in FreeImage 3.18.0 (BitmapAccess.cpp::FreeImage_AllocateBitmap) that can cause a denial of service; multiple connected advisories (Fedora, Mageia) reference and imply downstream fixes/patches are available or being released. Acknowledged relate...

CVE-2020-22524

CVE-2020-22524 is a buffer overflow in FreeImage_Load used when processing PFM files in FreeImage Library (3.19.0). Exploitation could trigger denial of service. Connected advisories (Debian DSA-5579/DLA-3662, Ubuntu USN 6586-1, OpenVAS entries) confirm FreeImage vulnerabilities affecting multipl...

CVE-2023-47997

CVE-2023-47997 affects FreeImage 3.18.0, where BitmapAccess.cpp::FreeImage_AllocateBitmap can loop infinitely, enabling denial of service. Fedora advisories note downstream fixes; downstream packages moving to FreeImage 3.19.0. Exploitation details are not provided in the core documents; no in-wi...

CVE-2024-28567

The open source FreeImage library (specifically version v.3.19.0 [r1909] ) contains a buffer overflow vulnerability. This flaw occurs in the FreeImage_CreateICCProfile() function because the program fails to properly validate the length and size of input data when processing images in TIFF format...

CVE-2016-5684

CVE-2016-5684 is a vulnerability in the FreeImage library’s XMP image handling that allows a specially crafted image to trigger an out-of-bounds write, overwriting memory and potentially enabling code execution. The issue is documented across multiple advisories (e.g., USN-3925-1 for Ubuntu, open...

CVE-2024-28570

The open source FreeImage v.3.19.0 [r1909] library contains a buffer overflow vulnerability. A local attacker can exploit this flaw via the processMakerNote() function when the software processes images in JPEG format . This vulnerability leads to a denial of service (DoS) . While the vulnerabili...

CVE-2024-28583

A Buffer Overflow vulnerability exists in the open source FreeImage v.3.19.0 [r1909] library. The flaw is located in the readLine() function, which fails to properly check the size of the input during the processing of images in XPM format . A local attacker can exploit this vulnerability to achi...

CVE-2024-28563

The open-source FreeImage v.3.19.0 [r1909] library is vulnerable to a buffer overflow in the Imf_2_2::DwaCompressor::Classifier::Classifier() function. A local attacker can exploit this flaw to cause a denial of service (DoS) when the software processes images in EXR format . While technical deta...

CVE-2024-28565

The open-source library FreeImage v.3.19.0 [r1909] is vulnerable to a buffer overflow in the psdParser::ReadImageData() function. A local attacker can exploit this flaw when the library reads images in PSD format , potentially leading to a denial of service (DoS) . While some distributions may re...

CVE-2024-28569

The open-source FreeImage library, version v.3.19.0 [r1909] , contains a buffer overflow vulnerability (CWE-120). A local attacker can exploit this flaw to execute arbitrary code by triggering the Imf_2_2::Xdr::read() function while processing images in EXR format . While various Linux distributi...

CVE-2024-28562

The open-source FreeImage v.3.19.0 [r1909] library is affected by a Buffer Overflow vulnerability. A local attacker can achieve arbitrary code execution by targeting the Imf_2_2::copyIntoFrameBuffer() component while the software is reading images in EXR format . While some distributions like Ubu...

CVE-2024-28578

The open source FreeImage library (version v.3.19.0 [r1909] ) is susceptible to a buffer overflow vulnerability. A local attacker can exploit this flaw to execute arbitrary code by leveraging the Load() function when the software processes images in RAS format . While various Linux distributions ...

CVE-2020-21428

CVE-2020-21428 affects FreeImage (library for graphics image formats). The vulnerability is a buffer overflow in function LoadRGB in PluginDDS.cpp, triggered by crafted image files, enabling remote code execution. Evidence across multiple advisories confirms FreeImage-related CVEs (including CVE-...

CVE-2024-28577

The open source FreeImage library, specifically version v.3.19.0 [r1909] , is affected by a Null Pointer Dereference vulnerability. This flaw resides in the jpeg_read_exif_profile_raw() function and can be triggered when the library processes images in JPEG format . A local attacker can exploit t...

CVE-2024-28571

The open-source FreeImage v.3.19.0 [r1909] library is susceptible to a buffer overflow vulnerability within the fill_input_buffer() function. This issue occurs when the software fails to properly validate the length and size of input data while reading images in JPEG format . A local attacker can...

CVE-2024-28580

The open source FreeImage library, version v.3.19.0 [r1909] , contains a Stack-based Buffer Overflow vulnerability (CWE-121). A local attacker can exploit this flaw to execute arbitrary code by triggering the ReadData() function while processing images in RAS format . The documents indicate that ...

CVE-2024-28576

A buffer overflow vulnerability exists in the open-source FreeImage library, specifically affecting version v.3.19.0 [r1909] . The flaw is located within the opj_j2k_tcp_destroy() function and is triggered when the software processes images in J2K format . A local attacker can exploit this vulner...

CVE-2024-28584

The open source FreeImage v.3.19.0 [r1909] library contains a Null Pointer Dereference vulnerability. A local attacker can exploit this flaw to cause a Denial of Service (DoS) by targeting the J2KImageToFIBITMAP() function when the library processes images in J2K format . While the vulnerability ...

CVE-2024-28574

A Buffer Overflow vulnerability exists in the open-source FreeImage v.3.19.0 [r1909] library. This flaw is triggered within the opj_j2k_copy_default_tcp_and_create_tcd() function when the software attempts to read images in J2K format . A local attacker can exploit this vulnerability to cause a D...

CVE-2024-28582

A Stack-based Buffer Overflow vulnerability exists in the open source FreeImage v.3.19.0 [r1909] library. The flaw is located in the rgbe_RGBEToFloat() function, which can be triggered when the software processes images in HDR format . A local attacker can exploit this vulnerability to achieve ar...

CVE-2024-28564

The open-source FreeImage v.3.19.0 [r1909] library contains a buffer overflow vulnerability. A local attacker can trigger a denial of service (DoS) by exploiting the Imf_2_2::CharPtrIO::readChars() function during the processing of images in EXR format . Documentation indicates this vulnerability...

CVE-2024-28579

The open source FreeImage v.3.19.0 [r1909] library contains a buffer overflow vulnerability. The root cause is the software's failure to properly validate the length and size of input data. A local attacker can exploit this via the FreeImage_Unload() function when the library processes images in ...

CVE-2015-0852

CVE-2015-0852 affects FreeImage: multiple integer underflows in PluginPCX.cpp in FreeImage up to version 3.17.0 and earlier can cause heap memory corruption leading to remote denial of service. Affected component is the FreeImage image library; root cause is integer underflows when processing ima...

CVE-2024-28575

The open source FreeImage library, version v.3.19.0 [r1909] , contains a buffer overflow vulnerability within the opj_j2k_read_mct() function. This flaw occurs when the software processes images in J2K format , allowing a local attacker to trigger a denial of service (DoS) . While several Linux d...

CVE-2024-28581

The open-source FreeImage v.3.19.0 [r1909] library is affected by a buffer overflow vulnerability. The flaw occurs because the program fails to properly validate the length and size of input data when reading images in TARGA format . A local attacker can exploit this via the _assignPixel() functi...

CVE-2024-28568

A Stack-based Buffer Overflow vulnerability exists in the open source FreeImage v.3.19.0 [r1909] library. This flaw is triggered during the execution of the read_iptc_profile() function when processing images in TIFF format . A local attacker can exploit this vulnerability to cause a Denial of Se...

CVE-2021-33367

CVE-2021-33367 is a buffer overflow in FreeImage 3.18.0 that enables a denial of service when processing a crafted JXR file. Multiple security advisories and scans reference the vulnerability across Linux distros (e.g., Mageia and Fedora) and indicate a backport or patch is required (e.g., Fedora...

CVE-2024-9029

CVE-2024-9029 affects the freeimage library. A crafted image can cause a buffer over-read of 1 byte in the function read_iptc_profile (Source/Metadata/IPTC.cpp) because the profile size is not sanitized, leading to a denial of service. The impact is a crash of the application linked to the librar...

CVE-2024-28572

The open source FreeImage library (specifically version v.3.19.0 [r1909] ) contains a buffer overflow vulnerability. The flaw stems from the program's failure to correctly validate the length and size of input data during the processing of JPEG images. A local attacker can exploit this issue via ...

CVE-2021-40262

The CVE-2021-40262 vulnerability affects FreeImage prior to 1.18.0, caused by a stack exhaustion issue in the Validate function within PluginRAW.cpp. This is described across multiple sources (CNVD, Debian OSV, NVD, Ubuntu/Ubuntucve, etc.) as a denial-of-service risk due to consuming stack resour...

CVE-2024-28566

The open source FreeImage library (v.3.19.0 [r1909]) is affected by a stack-based buffer overflow vulnerability (CWE-121). The root cause is a failure to properly validate the length and size of input data during the processing of TIFF format images. A local attacker can exploit this flaw via the...

CVE-2020-21426

CVE-2020-21426 is a buffer overflow vulnerability in FreeImage 3.18.0 affecting the C_IStream::read function in PluginEXR.cpp, enabling arbitrary code execution via crafted image files. Connected advisories indicate FreeImage updates in Fedora to 3.19.0 (svn1909) across both mingw-freeimage and f...

CVE-2024-28573

The open source FreeImage library (v.3.19.0 [r1909]) is susceptible to a Stack-based Buffer Overflow (CWE-121). A local attacker can exploit this vulnerability via the jpeg_read_exif_profile() function when the software processes images in JPEG format , leading to a Denial of Service (DoS) . Expl...

CVE-2020-24292

CVE-2020-24292 is a buffer overflow in FreeImage 3.19.0’s PluginICO.cpp load function that can allow remote code execution when opening a crafted ICO file. The OSV entry for OESA-2024-2305 notes a security update for FreeImage 3.19.0 addressing this (and other CVEs), indicating a patched release ...

CVE-2020-24293

CVE-2020-24293 is a Buffer Overflow in FreeImage 3.19.0 (PSDParser.cpp psdThumbnail::Read) that enables remote code execution when opening crafted PSD files. Connected sources (OSV: OESA-2024-2305 and Fedora advisories) confirm a security update exists; remediation is to apply the FreeImage secur...

CVE-2020-24294

The CVE-2020-24294 entry describes a buffer overflow in FreeImage 3.19.0 (r1859) in the PSDParser.cpp function psdParser::UnpackRLE, allowing a remote attacker to cause a denial of service by opening a crafted PSD file. Connected sources confirm the affected component and the DoS impact; no patch...

CVE-2019-12212

CVE-2019-12212 affects FreeImage 3.18.0. The vulnerability lies in JXRMeta.c: the StreamCalcIFDSize function recursively calls itself when processing a malformed JXR file, causing stack exhaustion. This can enable a remote denial-of-service attack via a specially crafted file. The provided connec...

CVE-2020-24295

CVE-2020-24295 is a Buffer Overflow in FreeImage 3.19.0 (PSDParser.cpp::ReadImageLine) that enables remote code execution via crafted PSD files. Connected sources confirm the affected component and root cause, and OSV/ Fedora advisories indicate a security update addressing this CVE (alongside ot...

CVE-2021-40263

CVE-2021-40263 is a heap overflow vulnerability in FreeImage 1.18.0 triggered by the ofLoad function in PluginTIFF.cpp. The issues are documented across multiple sources confirming the vulnerability resides in FreeImage’s TIFF loading path and can lead to arbitrary code execution or memory corrup...

CVE-2021-40265

CVE-2021-40265 describes a heap overflow in FreeImage prior to 1.18.0, triggered via the ofLoad function in PluginJPEG.cpp. Affected component is the FreeImage library’s JPEG loader; the root cause is a heap overflow vulnerability in ofLoad. Impact is high (as indicated by CVSS in the reference s...

CVE-2023-47994

The CVE-2023-47994 issue affects FreeImage 3.18.0, caused by an integer overflow in LoadPixelDataRLE4 (PluginBMP.cpp). The vulnerability can lead to information disclosure, DoS, or arbitrary code execution, per NVD/CVE data (CVSS v3.1 base 8.8). Connected sources confirm the vulnerable component ...

CVE-2019-12214

CVE-2019-12214 affects FreeImage 3.18.0 where an out-of-bounds access can occur due to mishandling of the OpenJPEG j2k_read_ppm_v3 function in j2k.c. The value l_N_ppm is derived from the input file, and the code does not ensure it is within the bounds of p_header_data, enabling potential memory ...

CVE-2021-40266

FreeImage prior to v1.18.0 contains a null pointer dereference in ReadPalette() within PluginTIFF.cpp (CVE-2021-40266). The CVE affects FreeImage and is reflected in multiple advisories (OSV, Nessus/NASL feeds) linking to downstream fixes; upgrading to 1.18.0+ is the documented remedy in the OSV ...

CVE-2023-47992

CVE-2023-47992 describes an integer overflow in FreeImage 3.18.0 within FreeImageIO.cpp::_MemoryReadProc. The vulnerability can allow attackers to obtain sensitive information, cause denial-of-service, and potentially execute arbitrary code. The connected documents reiterate the same component an...

CVE-2021-40264

CVE-2021-40264 affects the FreeImage library, where a NULL pointer dereference occurs in FreeImage_CloneTag (FreeImageTag.cpp) before version 1.18.0. The vulnerability is triggered by processing certain tags, leading to an application crash and potential denial of service. CVSS details indicate N...