Buffer Overflow in FreeImage Open Source Software
CVE-2024-28563
Currently unrated
What is CVE-2024-28563?
A buffer overflow vulnerability exists in FreeImage v.3.19.0, specifically within the Imf_2_2::DwaCompressor::Classifier::Classifier() function. This flaw enables a local attacker to exploit the way images in EXR format are handled, potentially leading to a denial of service (DoS) condition. By carefully crafting an EXR image, the attacker may cause unexpected behavior or crash the application, highlighting the need for prompt remediation.