CVE-2019-12213

FreeImage library (3.18.0 affected in FreeImage 3.18.0 and earlier) contains TIFF handling flaws in PluginTIFF.cpp that lead to: (1) CVE-2019-12211 — heap overflow during memcpy in Load, enabling possible DoS or other impact; and (2) CVE-2019-12213 — stack exhaustion due to recursion in TIFF proc...

CVE-2019-12211

CVE-2019-12211 affects the FreeImage library (notably up to 3.18.0, with fixes in later package updates) where a memcpy in PluginTIFF.cpp can cause a heap overflow when processing TIFF data. This is a remote-attack surface that could lead to denial of service as described in multiple advisories. ...

CVE-2024-31570

CVE-2024-31570 affects libfreeimage in FreeImage 3.4.0 through 3.18.0, where a stack-based buffer overflow occurs in PluginXPM.cpp Load when processing XPM files. The issue is triggered by a crafted XPM input and is rated critical (CVSS v3.1: 9.8, NETWORK, LOW complexity, no user interaction). Af...

CVE-2020-21427

CVE-2020-21427 : A buffer overflow in FreeImage 3.18.0 (LoadPixelDataRLE8 in PluginBMP.cpp) can be triggered by crafted image files, potentially allowing remote code execution. Public reports reference FreeImage vulnerabilities across multiple distributions; Debian advisories note fixes in 3.18.0...

CVE-2023-47995

CVE-2023-47995 is a memory-allocation vulnerability in FreeImage 3.18.0 (BitmapAccess.cpp::FreeImage_AllocateBitmap) that can cause a denial of service; multiple connected advisories (Fedora, Mageia) reference and imply downstream fixes/patches are available or being released. Acknowledged relate...

CVE-2025-70968

CVE-2025-70968 affects FreeImage 3.18.0, where a Use-After-Free vulnerability exists in PluginTARGA.cpp;loadRLE. The issue is confirmed across multiple sources (NVD/NASL OSV/Ubuntu/Debian references) and is described as a Use After Free in the loadRLE() routine of the TARGA plugin. Impact is desc...

CVE-2020-22524

CVE-2020-22524 is a buffer overflow in FreeImage_Load used when processing PFM files in FreeImage Library (3.19.0). Exploitation could trigger denial of service. Connected advisories (Debian DSA-5579/DLA-3662, Ubuntu USN 6586-1, OpenVAS entries) confirm FreeImage vulnerabilities affecting multipl...

CVE-2023-47997

CVE-2023-47997 affects FreeImage 3.18.0, where BitmapAccess.cpp::FreeImage_AllocateBitmap can loop infinitely, enabling denial of service. Fedora advisories note downstream fixes; downstream packages moving to FreeImage 3.19.0. Exploitation details are not provided in the core documents; no in-wi...

CVE-2016-5684

CVE-2016-5684 is a vulnerability in the FreeImage library’s XMP image handling that allows a specially crafted image to trigger an out-of-bounds write, overwriting memory and potentially enabling code execution. The issue is documented across multiple advisories (e.g., USN-3925-1 for Ubuntu, open...

CVE-2024-28567

CVE-2024-28567 describes a buffer overflow in the FreeImage library (v3.19.0 [r1909]) that allows a local attacker to trigger a DoS via FreeImage_CreateICCProfile() when processing TIFF images. Public references in the provided documents confirm the vulnerability exists in FreeImage and affect TI...

CVE-2024-28565

CVE-2024-28565: The vulnerability is in the open source FreeImage library version 3.19.0 [r1909], where a buffer overflow in psdParser::ReadImageData() when processing PSD images enables a local attacker to cause a denial of service. This is documented across multiple connected feeds (NVD, SUSE, ...

CVE-2024-28583

CVE-2024-28583: Buffer Overflow in open source FreeImage 3.19.0 (r1909) allows a local attacker to execute arbitrary code via readLine() when reading XPM images. The Connected documents corroborate a local-privilege path with no explicit patch details provided; no exploit code is included in the ...

CVE-2024-28570

CVE-2024-28570 describes a buffer overflow in the open source library FreeImage v3.19.0 [r1909]. A local attacker can trigger a denial of service by invoking processMakerNote() while reading JPEG images. The description is consistent across multiple sources in the connected documents, which do no...

CVE-2024-28578

CVE-2024-28578 describes a Buffer Overflow in the open-source FreeImage library (version 3.19.0 [r1909]) that can allow a local attacker to execute arbitrary code via the Load() function when reading images in the RAS format. The vulnerability is triggered in FreeImage’s image-loading path, leadi...

CVE-2024-28569

The CVE-2024-28569 entry concerns the open source library FreeImage v3.19.0 (r1909) . A buffer overflow in the function Imf_2_2::Xdr::read() when processing EXR images can allow a local attacker to execute arbitrary code. This vulnerability affects FreeImage’s EXR handling and is described across...

CVE-2024-28562

CVE-2024-28562 affects FreeImage v3.19.0 [r1909]. The vulnerability is a Buffer Overflow in the Imf_2_2::copyIntoFrameBuffer() path when reading EXR images, allowing a local attacker to execute arbitrary code. Documents consistently describe the issue as local to FreeImage’s EXR handling; no deta...

CVE-2024-28571

CVE-2024-28571 affects FreeImage v3.19.0 (r1909). The vulnerability is a buffer overflow in fill_input_buffer() while reading JPEG images, enabling a local attacker to cause a DoS. Documents consistently describe a local attack vector with low privileges and no user interaction, yielding a High i...

CVE-2024-28577

CVE-2024-28577 affects FreeImage 3.19.0 (r1909). It is a Local Privilege/DoS issue caused by a Null Pointer Dereference in jpeg_read_exif_profile_raw() when reading JPEGs, allowing a local attacker to trigger a denial of service. Connected sources corroborate the vulnerability across multiple fee...

CVE-2024-28580

CVE-2024-28580 concerns a buffer overflow in FreeImage v3.19.0 [r1909] triggered by ReadData() when processing RAS format images, allowing a local attacker to execute arbitrary code. The vulnerability is described consistently across multiple sources (NVD/NASL/Nessus/SUSE/Ubuntu/OSV/DEBIAN/Ubuntu...

CVE-2024-28584

CVE-2024-28584 describes a Null Pointer Dereference in the open-source library FreeImage v3.19.0 (r1909) . The vulnerability is triggered by the function J2KImageToFIBITMAP() when reading images in the J2K format , allowing a local attacker to cause a Denial of Service (DoS) . The connected docum...

CVE-2020-21428

CVE-2020-21428 affects FreeImage (library for graphics image formats). The vulnerability is a buffer overflow in function LoadRGB in PluginDDS.cpp, triggered by crafted image files, enabling remote code execution. Evidence across multiple advisories confirms FreeImage-related CVEs (including CVE-...

CVE-2024-28563

The CVE-2024-28563 vulnerability affects FreeImage v3.19.0 (r1909). The root cause is a buffer overflow in the EXR image path, specifically Imf_2_2::DwaCompressor::Classifier::Classifier(), which can cause a locally-triggered DoS when reading EXR images. The provided connected documents confirm t...

CVE-2024-28564

CVE-2024-28564 affects FreeImage 3.19.0 [r1909]. A buffer overflow in Imf_2_2::CharPtrIO::readChars() can cause a local DoS when reading EXR images. Public details confirm the vulnerability but do not provide vendor patch information in the supplied documents. Some connected sources (e.g., unpatc...

CVE-2024-28581

CVE-2024-28581 is a local vulnerability in open-source FreeImage 3.19.0 [r1909], where a buffer overflow in the _assignPixel() function during TARGA image reading allows a local attacker to execute arbitrary code. The accompanying CVSS 3.1 vector indicates a high impact (C/H, I/H, A/H) with LOCAL...

CVE-2024-28582

CVE-2024-28582 applies to the open-source FreeImage library (v3.19.0, r1909). A buffer overflow in the function rgbe_RGBEToFloat() when reading HDR images allows a local attacker to execute arbitrary code. The vulnerability is documented across multiple sources (NVD,NASL/UBUNTU OSVs/SUSE/Debian t...

CVE-2024-28576

CVE-2024-28576 concerns the FreeImage library. A buffer overflow in FreeImage v3.19.0 (r1909) allows a local attacker to cause a DoS by triggering the opj_j2k_tcp_destroy() path when reading images in J2K format. The vulnerability is due to improper handling within this function, enabling denial ...

CVE-2015-0852

CVE-2015-0852 affects FreeImage: multiple integer underflows in PluginPCX.cpp in FreeImage up to version 3.17.0 and earlier can cause heap memory corruption leading to remote denial of service. Affected component is the FreeImage image library; root cause is integer underflows when processing ima...

CVE-2024-28574

CVE-2024-28574 affects the open-source library FreeImage, version 3.19.0 [r1909]. The vulnerability is a buffer overflow in the function opj_j2k_copy_default_tcp_and_create_tcd() when reading images in the J2K format, enabling a local attacker to cause a denial of service. Connected sources reite...

CVE-2024-28575

CVE-2024-28575 affects open-source FreeImage v3.19.0 (r1909). The vulnerability is a buffer overflow in the opj_j2k_read_mct() function when processing JPEG2000 (J2K) images, enabling a local attacker to cause a DoS. The NVD/NIST entry documents a local impact with a CVSS v3.1 base score of 6.2 (...

CVE-2024-28568

CVE-2024-28568 is a buffer overflow in the open-source FreeImage library (version 3.19.0 [r1909]) that allows a local attacker to cause a denial of service when processing TIFF images via the read_iptc_profile() function. The published descriptions consistently identify FreeImage v3.19.0 and the ...

CVE-2021-33367

CVE-2021-33367 is a buffer overflow in FreeImage 3.18.0 that enables a denial of service when processing a crafted JXR file. Multiple security advisories and scans reference the vulnerability across Linux distros (e.g., Mageia and Fedora) and indicate a backport or patch is required (e.g., Fedora...

CVE-2024-28579

CVE-2024-28579 concerns a buffer overflow in the open‑source FreeImage library (v3.19.0 [r1909]). The vulnerability is triggered by the FreeImage_Unload() function when processing HDR images, allowing a local attacker to cause a denial of service. Affected component is FreeImage_Version 3.19.0; i...

CVE-2024-28572

CVE-2024-28572 affects the open-source FreeImage library (v3.19.0 [r1909]). A buffer overflow in FreeImage_SetTagValue() when reading JPEGs allows a local attacker to cause a DoS. Root cause: inadequate validation of input length/size. Exploitation evidence is present (PoC noted in the ADP metric...

CVE-2024-9029

CVE-2024-9029 affects the freeimage library. A crafted image can cause a buffer over-read of 1 byte in the function read_iptc_profile (Source/Metadata/IPTC.cpp) because the profile size is not sanitized, leading to a denial of service. The impact is a crash of the application linked to the librar...

CVE-2024-28566

CVE-2024-28566 is a buffer overflow in the open-source FreeImage library (v.3.19.0 [r1909]) that allows a local attacker to execute arbitrary code via the TIFF reading path, specifically through AssignPixel(). The connected documents consistently describe this vulnerability in FreeImage’s TIFF ha...

CVE-2021-40262

The CVE-2021-40262 vulnerability affects FreeImage prior to 1.18.0, caused by a stack exhaustion issue in the Validate function within PluginRAW.cpp. This is described across multiple sources (CNVD, Debian OSV, NVD, Ubuntu/Ubuntucve, etc.) as a denial-of-service risk due to consuming stack resour...

CVE-2020-21426

CVE-2020-21426 is a buffer overflow vulnerability in FreeImage 3.18.0 affecting the C_IStream::read function in PluginEXR.cpp, enabling arbitrary code execution via crafted image files. Connected advisories indicate FreeImage updates in Fedora to 3.19.0 (svn1909) across both mingw-freeimage and f...

CVE-2024-28573

CVE-2024-28573 is a buffer overflow vulnerability in the open-source library FreeImage v3.19.0 (r1909) that allows a local attacker to trigger a DoS by calling jpeg_read_exif_profile() while reading JPEG images. The issue affects FreeImage as packaged in multiple distributions and has been docume...

CVE-2020-24292

CVE-2020-24292 is a buffer overflow in FreeImage 3.19.0’s PluginICO.cpp load function that can allow remote code execution when opening a crafted ICO file. The OSV entry for OESA-2024-2305 notes a security update for FreeImage 3.19.0 addressing this (and other CVEs), indicating a patched release ...

CVE-2020-24293

CVE-2020-24293 is a Buffer Overflow in FreeImage 3.19.0 (PSDParser.cpp psdThumbnail::Read) that enables remote code execution when opening crafted PSD files. Connected sources (OSV: OESA-2024-2305 and Fedora advisories) confirm a security update exists; remediation is to apply the FreeImage secur...

CVE-2021-40265

CVE-2021-40265 describes a heap overflow in FreeImage prior to 1.18.0, triggered via the ofLoad function in PluginJPEG.cpp. Affected component is the FreeImage library’s JPEG loader; the root cause is a heap overflow vulnerability in ofLoad. Impact is high (as indicated by CVSS in the reference s...

CVE-2019-12212

CVE-2019-12212 affects FreeImage 3.18.0. The vulnerability lies in JXRMeta.c: the StreamCalcIFDSize function recursively calls itself when processing a malformed JXR file, causing stack exhaustion. This can enable a remote denial-of-service attack via a specially crafted file. The provided connec...

CVE-2020-24294

The CVE-2020-24294 entry describes a buffer overflow in FreeImage 3.19.0 (r1859) in the PSDParser.cpp function psdParser::UnpackRLE, allowing a remote attacker to cause a denial of service by opening a crafted PSD file. Connected sources confirm the affected component and the DoS impact; no patch...

CVE-2021-40263

CVE-2021-40263 is a heap overflow vulnerability in FreeImage 1.18.0 triggered by the ofLoad function in PluginTIFF.cpp. The issues are documented across multiple sources confirming the vulnerability resides in FreeImage’s TIFF loading path and can lead to arbitrary code execution or memory corrup...

CVE-2019-12214

CVE-2019-12214 affects FreeImage 3.18.0 where an out-of-bounds access can occur due to mishandling of the OpenJPEG j2k_read_ppm_v3 function in j2k.c. The value l_N_ppm is derived from the input file, and the code does not ensure it is within the bounds of p_header_data, enabling potential memory ...

CVE-2020-24295

CVE-2020-24295 is a Buffer Overflow in FreeImage 3.19.0 (PSDParser.cpp::ReadImageLine) that enables remote code execution via crafted PSD files. Connected sources confirm the affected component and root cause, and OSV/ Fedora advisories indicate a security update addressing this CVE (alongside ot...

CVE-2023-47994

The CVE-2023-47994 issue affects FreeImage 3.18.0, caused by an integer overflow in LoadPixelDataRLE4 (PluginBMP.cpp). The vulnerability can lead to information disclosure, DoS, or arbitrary code execution, per NVD/CVE data (CVSS v3.1 base 8.8). Connected sources confirm the vulnerable component ...

CVE-2021-40266

FreeImage prior to v1.18.0 contains a null pointer dereference in ReadPalette() within PluginTIFF.cpp (CVE-2021-40266). The CVE affects FreeImage and is reflected in multiple advisories (OSV, Nessus/NASL feeds) linking to downstream fixes; upgrading to 1.18.0+ is the documented remedy in the OSV ...

CVE-2023-47996

CVE-2023-47996 is an integer overflow in FreeImage 3.18.0, specifically in Exif.cpp::jpeg_read_exif_dir. The vulnerability can allow attackers to obtain information and cause a denial of service. Affected component: FreeImage 3.18.0; root cause: improper handling in jpeg_read_exif_dir leading to ...

CVE-2021-40264

CVE-2021-40264 affects the FreeImage library, where a NULL pointer dereference occurs in FreeImage_CloneTag (FreeImageTag.cpp) before version 1.18.0. The vulnerability is triggered by processing certain tags, leading to an application crash and potential denial of service. CVSS details indicate N...