UBUNTU-CVE-2020-21428

Advisory lineage Upstream: 1 Downstream: 1
Upstream
CVE-2020-21428
Downstream
USN-6586-1
Published: 22 Aug 2023, 19:16
Last modified:04 Feb 2026, 03:35

Vulnerability Summary

Overall Risk (default)
low
13/100
CVSS Score
3.3 LOW
3.1 (osv_ubuntu)
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

22 Aug 2023, 19:16
Published
Vulnerability first disclosed
04 Feb 2026, 03:35
Last Modified
Vulnerability information updated

Description

Buffer Overflow vulnerability in function LoadRGB in PluginDDS.cpp in FreeImage 3.18.0 allows remote attackers to run arbitrary code and cause other impacts via crafted image file.

CVSS Metrics

  • v3.1•LOW•Score: 3.3CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Affected Systems

  • ubuntu•freeimage

    < 3.15.4-3ubuntu0.1+esm3 | < 3.17.0+ds1-2ubuntu0.1+esm1 | < 3.17.0+ds1-5+deb9u1ubuntu0.1~esm1 | < 3.18.0+ds2-1ubuntu3.1 | < 3.18.0+ds2-6ubuntu5.1 | < 3.18.0+ds2-10build4

References (4)