DEBIAN-CVE-2020-21428

Advisory lineage Upstream: 1 Downstream: 2
Upstream
CVE-2020-21428
Published: 22 Aug 2023, 19:16
Last modified:20 Nov 2025, 10:15

Vulnerability Summary

Overall Risk (default)
medium
31/100
CVSS Score
7.8 HIGH
3.1 (osv_debian)
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

22 Aug 2023, 19:16
Published
Vulnerability first disclosed
20 Nov 2025, 10:15
Last Modified
Vulnerability information updated

Description

Buffer Overflow vulnerability in function LoadRGB in PluginDDS.cpp in FreeImage 3.18.0 allows remote attackers to run arbitrary code and cause other impacts via crafted image file.

CVSS Metrics

  • v3.1•HIGH•Score: 7.8CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected Systems

  • debian•freeimage

    < 3.18.0+ds2-6+deb11u1 | < 3.18.0+ds2-9+deb12u1 | < 3.18.0+ds2-10 | < 3.18.0+ds2-10

References (1)