Integer Overflow in FreeImage Software Affects Sensitive Information Handling

CVE-2023-47992

What is CVE-2023-47992?

An integer overflow issue is present in the FreeImage library, specifically within the _MemoryReadProc function of FreeImageIO.cpp in version 3.18.0. This vulnerability can be exploited by attackers to gain unauthorized access to sensitive information, potentially leading to a compromise in system integrity. Furthermore, the flaw poses a risk of denial-of-service attacks and allows the execution of arbitrary code, enhancing the threat landscape associated with this widely used imaging library. Users and developers relying on FreeImage should take immediate steps to assess their exposure and apply necessary updates.

References