Freeimage Project: Security Vulnerabilities
An integer overflow vulnerability in Exif.cpp::jpeg_read_exif_dir in FreeImage 3.18.0 allows attackers to obtain information and cause a denial of service.
CVSS Score
6.5
EPSS Score
0.001
Published
2024-01-09
A stack exhaustion issue was discovered in FreeImage before 1.18.0 via the Validate function in PluginRAW.cpp.
CVSS Score
6.5
EPSS Score
0.002
Published
2023-08-22
A heap overflow vulnerability in FreeImage 1.18.0 via the ofLoad function in PluginTIFF.cpp.
CVSS Score
8.8
EPSS Score
0.001
Published
2023-08-22
NULL pointer dereference vulnerability in FreeImage before 1.18.0 via the FreeImage_CloneTag function inFreeImageTag.cpp.
CVSS Score
6.5
EPSS Score
0.001
Published
2023-08-22
A heap overflow bug exists FreeImage before 1.18.0 via ofLoad function in PluginJPEG.cpp.
CVSS Score
8.8
EPSS Score
0.003
Published
2023-08-22
FreeImage before 1.18.0, ReadPalette function in PluginTIFF.cpp is vulnerabile to null pointer dereference.
CVSS Score
6.5
EPSS Score
0.001
Published
2023-08-22
Buffer Overflow vulnerability in FreeImage_Load function in FreeImage Library 3.19.0(r1828) allows attackers to cuase a denial of service via crafted PFM file.
CVSS Score
6.5
EPSS Score
0.002
Published
2023-08-22
Buffer Overflow vulnerability in load function in PluginICO.cpp in FreeImage 3.19.0 [r1859] allows remote attackers to run arbitrary code via opening of crafted ico file.
CVSS Score
8.8
EPSS Score
0.015
Published
2023-08-22
Buffer Overflow vulnerability in psdThumbnail::Read in PSDParser.cpp in FreeImage 3.19.0 [r1859] allows remote attackers to run arbitrary code via opening of crafted psd file.
CVSS Score
8.8
EPSS Score
0.015
Published
2023-08-22
Buffer Overflow vulnerability in psdParser::UnpackRLE function in PSDParser.cpp in FreeImage 3.19.0 [r1859] allows remote attackers to cuase a denial of service via opening of crafted psd file.
CVSS Score
6.5
EPSS Score
0.007
Published
2023-08-22