Freeimage Project vulnerabilities
We track 10 vulnerabilities in Freeimage Project products. 10 are rated high or critical, and none are known to be exploited. The most recent was published on September 27, 2024.
Latest Freeimage Project vulnerabilities
- 7.5 High severity
freeimage: Buffer Over-read
A flaw was found in the freeimage library. Processing a crafted image can cause a buffer over-read of 1 byte in the read_iptc_profile function in the Source/Metadata/IPTC.cpp file because the size of the profile is not being sanitized, causing a crash in the a
- 7.8 High severity
freeimage: Buffer Copy without Checking Size of Input
Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the readLine() function when reading images in XPM format.
- 8.4 High severity
freeimage: Stack-based Buffer Overflow
Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the rgbe_RGBEToFloat() function when reading images in HDR format.
- 8.4 High severity
freeimage: Stack-based Buffer Overflow
Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the _assignPixel<>() function when reading images in TARGA format.
- 8.4 High severity
freeimage: Stack-based Buffer Overflow
Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the ReadData() function when reading images in RAS format.
- 8.4 High severity
freeimage: Out-of-bounds Read
Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the Load() function when reading images in RAS format.
- 7.8 High severity
freeimage: Buffer Copy without Checking Size of Input
Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the Imf_2_2::Xdr::read() function when reading images in EXR format.
- 8.4 High severity
freeimage: Stack-based Buffer Overflow
Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the AssignPixel() function when reading images in TIFF format.
- 8.8 High severity
Freeimage: Integer Overflow or Wraparound
An integer overflow vulnerability in LoadPixelDataRLE4 function in PluginBMP.cpp in Freeimage 3.18.0 allows attackers to obtain sensitive information, cause a denial of service and/or run arbitrary code.
- 8.8 High severity
Freeimage: Integer Overflow or Wraparound
An integer overflow vulnerability in FreeImageIO.cpp::_MemoryReadProc in FreeImage 3.18.0 allows attackers to obtain sensitive information, cause a denial-of-service attacks and/or run arbitrary code.