Freeimage Project Freeimage vulnerabilities
53 vulnerabilities
Known vulnerabilities in Freeimage Project Freeimage, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-40266debianfreeimage+2
EPSS score0.96%
FreeImage before 1.18.0, ReadPalette function in PluginTIFF.cpp is vulnerabile to null pointer dereference.CVE-2021-40262debianfreeimage+2EPSS score0.73%
A stack exhaustion issue was discovered in FreeImage before 1.18.0 via the Validate function in PluginRAW.cpp.CVE-2021-40263debianfreeimage+2EPSS score1.16%
A heap overflow vulnerability in FreeImage 1.18.0 via the ofLoad function in PluginTIFF.cpp.CVE-2021-40265debianfreeimage+2EPSS score0.89%
A heap overflow bug exists FreeImage before 1.18.0 via ofLoad function in PluginJPEG.cpp.CVE-2021-40264debianfreeimage+2EPSS score0.73%
NULL pointer dereference vulnerability in FreeImage before 1.18.0 via the FreeImage_CloneTag function inFreeImageTag.cpp.CVE-2021-33367debianfreeimage+3EPSS score0.28%
Buffer Overflow vulnerability in Freeimage v3.18.0 allows attacker to cause a denial of service via a crafted JXR file.CVE-2015-0852debianfreeimage+5EPSS score3.03%
Multiple integer underflows in PluginPCX.cpp in FreeImage 3.17.0 and earlier allow remote attackers to cause a denial of service (heap memory corruption) via vectors related to the height and width of a window.CVE-2016-5684debianfreeimage+3EPSS score1.81%
An exploitable out-of-bounds write vulnerability exists in the XMP image handling functionality of the FreeImage library. A specially crafted XMP file can cause an arbitrary memory overwrite resulting in code execution. An attacker can provide a malicious image to trigger this vulnerability.CVE-2025-65803debianfreeimage+2EPSS score0.30%
An integer overflow in the psdParser::ReadImageData function of FreeImage v3.18.0 and before allows attackers to cause a Denial of Service (DoS) via supplying a crafted PSD file.CVE-2025-70968debianfreeimage+2EPSS score0.53%
FreeImage 3.18.0 contains a Use After Free in PluginTARGA.cpp;loadRLE().CVE-2020-21428debianfreeimage+3EPSS score0.46%
Buffer Overflow vulnerability in function LoadRGB in PluginDDS.cpp in FreeImage 3.18.0 allows remote attackers to run arbitrary code and cause other impacts via crafted image file.CVE-2020-21427debianfreeimage+2EPSS score0.52%
Buffer Overflow vulnerability in function LoadPixelDataRLE8 in PluginBMP.cpp in FreeImage 3.18.0 allows remote attackers to run arbitrary code and cause other impacts via crafted image file.CVE-2020-21426debianfreeimage+2EPSS score0.49%
Buffer Overflow vulnerability in function C_IStream::read in PluginEXR.cpp in FreeImage 3.18.0 allows remote attackers to run arbitrary code and cause other impacts via crafted image file.CVE-2020-22524debianfreeimage+2EPSS score1.05%
Buffer Overflow vulnerability in FreeImage_Load function in FreeImage Library 3.19.0(r1828) allows attackers to cuase a denial of service via crafted PFM file.CVE-2020-24295debianfreeimage+2EPSS score1.37%
Buffer Overflow vulnerability in PSDParser.cpp::ReadImageLine() in FreeImage 3.19.0 [r1859] allows remote attackers to ru narbitrary code via use of crafted psd file.CVE-2020-24294debianfreeimage+2EPSS score0.85%
Buffer Overflow vulnerability in psdParser::UnpackRLE function in PSDParser.cpp in FreeImage 3.19.0 [r1859] allows remote attackers to cuase a denial of service via opening of crafted psd file.CVE-2020-24292debianfreeimage+2EPSS score1.46%
Buffer Overflow vulnerability in load function in PluginICO.cpp in FreeImage 3.19.0 [r1859] allows remote attackers to run arbitrary code via opening of crafted ico file.CVE-2020-24293debianfreeimage+2EPSS score1.46%
Buffer Overflow vulnerability in psdThumbnail::Read in PSDParser.cpp in FreeImage 3.19.0 [r1859] allows remote attackers to run arbitrary code via opening of crafted psd file.CVE-2024-9029debianfreeimage+2EPSS score0.51%
A flaw was found in the freeimage library. Processing a crafted image can cause a buffer over-read of 1 byte in the read_iptc_profile function in the Source/Metadata/IPTC.cpp file because the size of the profile is not being sanitized, causing a crash in the application linked to the library, resulting in a denial of service.CVE-2024-31570debianfreeimage+2EPSS score0.60%
libfreeimage in FreeImage 3.4.0 through 3.18.0 has a stack-based buffer overflow in the PluginXPM.cpp Load function via an XPM file.