CVEDB API

FreeImage before 1.18.0, ReadPalette function in PluginTIFF.cpp is vulnerabile to null pointer dereference.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 30.0%

CVSS Severity

CVSS v3 Score 6.5

References

Products affected by CVE-2021-40266

Freeimage Project » Freeimage » Version: 1.0.0

cpe:2.3:a:freeimage_project:freeimage:1.0.0
Freeimage Project » Freeimage » Version: 1.1.0

cpe:2.3:a:freeimage_project:freeimage:1.1.0
Freeimage Project » Freeimage » Version: 1.1.1

cpe:2.3:a:freeimage_project:freeimage:1.1.1
Freeimage Project » Freeimage » Version: 1.2.0

cpe:2.3:a:freeimage_project:freeimage:1.2.0
Freeimage Project » Freeimage » Version: 1.2.1

cpe:2.3:a:freeimage_project:freeimage:1.2.1
Freeimage Project » Freeimage » Version: 1.3.0

cpe:2.3:a:freeimage_project:freeimage:1.3.0
Freeimage Project » Freeimage » Version: 1.3.1

cpe:2.3:a:freeimage_project:freeimage:1.3.1
Freeimage Project » Freeimage » Version: 1.3.2

cpe:2.3:a:freeimage_project:freeimage:1.3.2
Freeimage Project » Freeimage » Version: 1.3.3

cpe:2.3:a:freeimage_project:freeimage:1.3.3
Freeimage Project » Freeimage » Version: 1.3.4

cpe:2.3:a:freeimage_project:freeimage:1.3.4
Freeimage Project » Freeimage » Version: 1.3.5

cpe:2.3:a:freeimage_project:freeimage:1.3.5
Freeimage Project » Freeimage » Version: 1.4.0

cpe:2.3:a:freeimage_project:freeimage:1.4.0
Freeimage Project » Freeimage » Version: 1.4.1

cpe:2.3:a:freeimage_project:freeimage:1.4.1
Freeimage Project » Freeimage » Version: 1.4.2

cpe:2.3:a:freeimage_project:freeimage:1.4.2
Freeimage Project » Freeimage » Version: 1.4.3

cpe:2.3:a:freeimage_project:freeimage:1.4.3
Freeimage Project » Freeimage » Version: 1.4.4

cpe:2.3:a:freeimage_project:freeimage:1.4.4