CVE-2020-22524: Buffer Overflow vulnerability in FreeImage_Load function in FreeImage Library 3.19.0(r1828) allows attackers to cuase a denial of service via crafted PFM file.

PriorityP426medium6.5CVSS 3.1

AVNACLPRNUIRSUCNINAH

EPSS

0.90%

55.5th percentile

Buffer Overflow vulnerability in FreeImage_Load function in FreeImage Library 3.19.0(r1828) allows attackers to cuase a denial of service via crafted PFM file.

Affected

11 ranges

Vendor	Product	Version range	Fixed in
debian	freeimage	< freeimage 3.18.0+ds2-9+deb12u1 (bookworm)	freeimage 3.18.0+ds2-9+deb12u1 (bookworm)
freeimage_project	freeimage	—	—
freeimage_project	freeimage	>= 0 < 3.18.0+ds2-6+deb11u1	3.18.0+ds2-6+deb11u1
freeimage_project	freeimage	>= 0 < 3.18.0+ds2-9+deb12u1	3.18.0+ds2-9+deb12u1
freeimage_project	freeimage	>= 0 < 3.18.0+ds2-10	3.18.0+ds2-10
freeimage_project	freeimage	>= 0 < 3.18.0+ds2-10	3.18.0+ds2-10
freeimage_project	freeimage	>= 0 < 3.18.0+ds2-1ubuntu3.1	3.18.0+ds2-1ubuntu3.1
freeimage_project	freeimage	>= 0 < 3.18.0+ds2-6ubuntu5.1	3.18.0+ds2-6ubuntu5.1
freeimage_project	freeimage	>= 0 < 3.15.4-3ubuntu0.1+esm3	3.15.4-3ubuntu0.1+esm3
freeimage_project	freeimage	>= 0 < 3.17.0+ds1-2ubuntu0.1+esm1	3.17.0+ds1-2ubuntu0.1+esm1
freeimage_project	freeimage	>= 0 < 3.17.0+ds1-5+deb9u1ubuntu0.1~esm1	3.17.0+ds1-5+deb9u1ubuntu0.1~esm1

CVSS provenance

nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

osv7.5HIGH

vendor_ubuntu7.5HIGH

vendor_debian6.5MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.