Buffer Overflow Vulnerability in FreeImage v.3.19.0 Allows Arbitrary Code Execution
CVE-2024-28582

Currently unrated

Key Information:

Vendor: FreeImage
Status: Freeimage
Vendor: CVE Published:; 20 March 2024

What is CVE-2024-28582?

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the rgbe_RGBEToFloat() function when reading images in HDR format.

References

https://github.com/Ruanxingzhi/vul-report/tree/master/fre...

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Mar 20, 2024
Vulnerability Reserved
Mar 8, 2024

JSON