USN-3925-1

Advisory lineage Upstream: 2 Downstream: 0
Published: 28 Mar 2019, 17:55
Last modified:04 Feb 2026, 02:53

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

28 Mar 2019, 17:55
Published
Vulnerability first disclosed
04 Feb 2026, 02:53
Last Modified
Vulnerability information updated

Description

freeimage vulnerability It was discovered that an out-of-bounds write vulnerability existed in the XMP image handling functionality of the FreeImage library. If a user or automated system were tricked into opening a specially crafted image, a remote attacker could overwrite arbitrary memory, resulting in code execution.

Affected Systems

  • ubuntu•freeimage

    < 3.15.4-3ubuntu0.1 | < 3.17.0+ds1-2ubuntu0.1

References (2)