CVE-2024-28565 - Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the psdParser::ReadImageData() function when reading images in PSD format

Back Back to CVE browser

MEDIUM

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the psdParser::ReadImageData() function when reading images in PSD format

Published Mar 20, 2024

5.5

MEDIUM

CVSS 3.1

EPSS 0.43%

Description

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the psdParser::ReadImageData() function when reading images in PSD format.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-120

Classic Buffer Overflow

References (5)

http://www.openwall.com/lists/oss-security/2024/04/11/10
mailing-listMailing ListThird Party Advisory
http://www.openwall.com/lists/oss-security/2024/04/11/2
mailing-listMailing ListThird Party Advisory
http://www.openwall.com/lists/oss-security/2024/04/11/3
mailing-listMailing ListThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-25662
Advisory
https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909
ExploitThird Party Advisory

Link	Providers	Tags
http://www.openwall.com/lists/oss-security/2024/04/11/10		mailing-listMailing ListThird Party Advisory
http://www.openwall.com/lists/oss-security/2024/04/11/2		mailing-listMailing ListThird Party Advisory
http://www.openwall.com/lists/oss-security/2024/04/11/3		mailing-listMailing ListThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-25662		Advisory
https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909		ExploitThird Party Advisory