CVE-2024-28580 - Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the ReadData() function when reading images in RAS format

Back Back to CVE browser

HIGH

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the ReadData() function when reading images in RAS format

Published Mar 20, 2024

8.4

HIGH

CVSS 3.1

EPSS 0.36%

Description

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the ReadData() function when reading images in RAS format.

Affected products

Vendor Freeimage Project Product Freeimage Default
n/a
- Version
  3.19.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Freeimage Project

Freeimage

n/a

Version	Status	Constraints
3.19.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-121

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-25677
Advisory
https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909
ExploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-25677		Advisory
https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909		ExploitThird Party Advisory