CVE-2024-28564 - Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the Imf_2_2::CharPtrIO::readChars() function when reading images in EXR format

Back Back to CVE browser

MEDIUM

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the Imf_2_2::CharPtrIO::readChars() function when reading images in EXR format

Published Mar 20, 2024

6.2

MEDIUM

CVSS 3.1

EPSS 0.46%

Description

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the Imf_2_2::CharPtrIO::readChars() function when reading images in EXR format.

Affected products

Vendor Freeimage Project Product Freeimage Default
n/a
- Version
  3.19.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Freeimage Project

Freeimage

n/a

Version	Status	Constraints
3.19.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-120

Classic Buffer Overflow

References (5)

http://www.openwall.com/lists/oss-security/2024/04/11/10
mailing-listMailing ListThird Party Advisory
http://www.openwall.com/lists/oss-security/2024/04/11/2
mailing-listMailing ListThird Party Advisory
http://www.openwall.com/lists/oss-security/2024/04/11/3
mailing-listMailing ListThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-25661
Advisory
https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909
ExploitThird Party Advisory

Link	Providers	Tags
http://www.openwall.com/lists/oss-security/2024/04/11/10		mailing-listMailing ListThird Party Advisory
http://www.openwall.com/lists/oss-security/2024/04/11/2		mailing-listMailing ListThird Party Advisory
http://www.openwall.com/lists/oss-security/2024/04/11/3		mailing-listMailing ListThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-25661		Advisory
https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909		ExploitThird Party Advisory