FreeImage Buffer Overflow Vulnerability Allows Arbitrary Code Execution
CVE-2024-28566

Currently unrated

Key Information:

Vendor: FreeImage
Status: Freeimage
Vendor: CVE Published:; 20 March 2024

What is CVE-2024-28566?

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the AssignPixel() function when reading images in TIFF format.

References

https://github.com/Ruanxingzhi/vul-report/tree/master/fre...

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Mar 20, 2024
Vulnerability Reserved
Mar 8, 2024

JSON