Arbitrary Code Execution Vulnerability in FreeImage v.3.19.0 via TARGA Image Reading
CVE-2024-28581

Currently unrated

Key Information:

Vendor: FreeImage
Status: Freeimage
Vendor: CVE Published:; 20 March 2024

What is CVE-2024-28581?

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the _assignPixel<>() function when reading images in TARGA format.

References

https://github.com/Ruanxingzhi/vul-report/tree/master/fre...

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Mar 20, 2024
Vulnerability Reserved
Mar 8, 2024

JSON