Freeimage Project

Freeimage

51 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2024-9029

Exploit
  • EPSS 0.21%
  • Published 27.09.2024 07:15:05
  • Last modified 08.08.2025 01:36:55

A flaw was found in the freeimage library. Processing a crafted image can cause a buffer over-read of 1 byte in the read_iptc_profile function in the Source/Metadata/IPTC.cpp file because the size of the profile is not being sanitized, causing a cras...

9.8

CVE-2024-31570

  • EPSS 0.35%
  • Published 19.09.2024 17:15:12
  • Last modified 25.09.2024 14:57:47

libfreeimage in FreeImage 3.4.0 through 3.18.0 has a stack-based buffer overflow in the PluginXPM.cpp Load function via an XPM file.

3.3

CVE-2024-28584

Exploit
  • EPSS 0.03%
  • Published 20.03.2024 06:15:12
  • Last modified 28.03.2025 14:47:52

Null Pointer Dereference vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the J2KImageToFIBITMAP() function when reading images in J2K format.

7.8

CVE-2024-28583

Exploit
  • EPSS 0.14%
  • Published 20.03.2024 06:15:12
  • Last modified 28.03.2025 14:48:08

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the readLine() function when reading images in XPM format.

8.4

CVE-2024-28582

Exploit
  • EPSS 0.06%
  • Published 20.03.2024 06:15:11
  • Last modified 28.03.2025 14:48:12

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the rgbe_RGBEToFloat() function when reading images in HDR format.

8.4

CVE-2024-28581

Exploit
  • EPSS 0.05%
  • Published 20.03.2024 06:15:11
  • Last modified 28.03.2025 14:48:15

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the _assignPixel<>() function when reading images in TARGA format.

8.4

CVE-2024-28580

Exploit
  • EPSS 0.07%
  • Published 20.03.2024 06:15:11
  • Last modified 28.03.2025 14:48:19

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the ReadData() function when reading images in RAS format.

6.2

CVE-2024-28579

Exploit
  • EPSS 0.03%
  • Published 20.03.2024 06:15:11
  • Last modified 28.03.2025 14:48:24

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the FreeImage_Unload() function when reading images in HDR format.

8.4

CVE-2024-28578

Exploit
  • EPSS 0.06%
  • Published 20.03.2024 06:15:11
  • Last modified 28.03.2025 14:48:28

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the Load() function when reading images in RAS format.

5.5

CVE-2024-28577

Exploit
  • EPSS 0.03%
  • Published 20.03.2024 06:15:11
  • Last modified 28.03.2025 14:48:33

Null Pointer Dereference vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the jpeg_read_exif_profile_raw() function when reading images in JPEG format.