Freeimage Project vulnerabilities, page 3
53 vulnerabilities
Known vulnerabilities in Freeimage Project products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1 product.
CVE-2024-28579debianfreeimage+2
EPSS score0.29%
Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the FreeImage_Unload() function when reading images in HDR format.CVE-2024-28578debianfreeimage+2EPSS score0.36%
Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the Load() function when reading images in RAS format.CVE-2024-28582debianfreeimage+2EPSS score0.36%
Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the rgbe_RGBEToFloat() function when reading images in HDR format.CVE-2019-12214debianfreeimage+2EPSS score1.46%
In FreeImage 3.18.0, an out-of-bounds access occurs because of mishandling of the OpenJPEG j2k_read_ppm_v3 function in j2k.c. The value of l_N_ppm comes from the file read in, and the code does not consider that l_N_ppm may be greater than the size of p_header_data.CVE-2019-12213canonicalubuntu_linux+5EPSS score2.20%
When FreeImage 3.18.0 reads a special TIFF file, the TIFFReadDirectory function in PluginTIFF.cpp always returns 1, leading to stack exhaustion.CVE-2019-12211canonicalubuntu_linux+3EPSS score4.21%
When FreeImage 3.18.0 reads a tiff file, it will be handed to the Load function of the PluginTIFF.cpp file, but a memcpy occurs in which the destination address and the size of the copied data are not considered, resulting in a heap overflow.CVE-2019-12212debianfreeimage+2EPSS score1.90%
When FreeImage 3.18.0 reads a special JXR file, the StreamCalcIFDSize function of JXRMeta.c repeatedly calls itself due to improper processing of the file, eventually causing stack exhaustion. An attacker can achieve a remote denial of service attack by sending a specially constructed file.CVE-2023-47996debianfreeimage+2EPSS score0.66%
An integer overflow vulnerability in Exif.cpp::jpeg_read_exif_dir in FreeImage 3.18.0 allows attackers to obtain information and cause a denial of service.CVE-2023-47992debianfreeimage+2EPSS score0.72%
An integer overflow vulnerability in FreeImageIO.cpp::_MemoryReadProc in FreeImage 3.18.0 allows attackers to obtain sensitive information, cause a denial-of-service attacks and/or run arbitrary code.CVE-2023-47993debianfreeimage+2EPSS score0.58%
A Buffer out-of-bound read vulnerability in Exif.cpp::ReadInt32 in FreeImage 3.18.0 allows attackers to cause a denial-of-service.CVE-2023-47994debianfreeimage+2EPSS score0.72%
An integer overflow vulnerability in LoadPixelDataRLE4 function in PluginBMP.cpp in Freeimage 3.18.0 allows attackers to obtain sensitive information, cause a denial of service and/or run arbitrary code.CVE-2023-47997debianfreeimage+2EPSS score0.88%
An issue discovered in BitmapAccess.cpp::FreeImage_AllocateBitmap in FreeImage 3.18.0 leads to an infinite loop and allows attackers to cause a denial of service.CVE-2023-47995debianfreeimage+2EPSS score0.73%
Memory Allocation with Excessive Size Value discovered in BitmapAccess.cpp::FreeImage_AllocateBitmap in FreeImage 3.18.0 allows attackers to cause a denial of service.