cbcvebase.
CVE-2021-40265
published 2023-08-22

CVE-2021-40265: A heap overflow bug exists FreeImage before 1.18.0 via ofLoad function in PluginJPEG.cpp.

high8.8CVSS 3.1
AVNACLPRNUIRSUCHIHAH
A heap overflow bug exists FreeImage before 1.18.0 via ofLoad function in PluginJPEG.cpp.

Affected

2 ranges
VendorProductVersion rangeFixed in
debianfreeimage
freeimage_projectfreeimage< 1.18.01.18.0

CVSS provenance

nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
osv8.8HIGH