Debian Freeimage vulnerabilities

CVE-2025-70968 [CRITICAL] CVE-2025-70968: freeimage - FreeImage 3.18.0 contains a Use After Free in PluginTARGA.cpp;loadRLE(). FreeImage 3.18.0 contains a Use After Free in PluginTARGA.cpp;loadRLE(). Scope: local bookworm: open bullseye: open forky: open sid: open trixie: open

CVE-2025-65803 [MEDIUM] CVE-2025-65803: freeimage - An integer overflow in the psdParser::ReadImageData function of FreeImage v3.18.... An integer overflow in the psdParser::ReadImageData function of FreeImage v3.18.0 and before allows attackers to cause a Denial of Service (DoS) via supplying a crafted PSD file. Scope: local bookworm: open bullseye: open forky: open sid: open trixie: open

CVE-2024-31570 [CRITICAL] CVE-2024-31570: freeimage - libfreeimage in FreeImage 3.4.0 through 3.18.0 has a stack-based buffer overflow... libfreeimage in FreeImage 3.4.0 through 3.18.0 has a stack-based buffer overflow in the PluginXPM.cpp Load function via an XPM file. Scope: local bookworm: open bullseye: open forky: open sid: open trixie: open

CVE-2024-28580 [HIGH] CVE-2024-28580: freeimage - Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a... Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the ReadData() function when reading images in RAS format. Scope: local bookworm: open bullseye: open forky: open sid: open trixie: open

CVE-2024-9029 [HIGH] CVE-2024-9029: freeimage - A flaw was found in the freeimage library. Processing a crafted image can cause ... A flaw was found in the freeimage library. Processing a crafted image can cause a buffer over-read of 1 byte in the read_iptc_profile function in the Source/Metadata/IPTC.cpp file because the size of the profile is not being sanitized, causing a crash in the application linked to the library, resulting in a denial of service. Scope: local bookworm: open bullseye: op

CVE-2024-28569 [HIGH] CVE-2024-28569: freeimage - Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a... Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the Imf_2_2::Xdr::read() function when reading images in EXR format. Scope: local bookworm: open bullseye: open forky: open sid: open trixie: open

CVE-2024-28578 [HIGH] CVE-2024-28578: freeimage - Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a... Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the Load() function when reading images in RAS format. Scope: local bookworm: open bullseye: open forky: open sid: open trixie: open

CVE-2024-28582 [HIGH] CVE-2024-28582: freeimage - Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a... Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the rgbe_RGBEToFloat() function when reading images in HDR format. Scope: local bookworm: open bullseye: open forky: open sid: open trixie: open

CVE-2024-28566 [HIGH] CVE-2024-28566: freeimage - Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a... Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the AssignPixel() function when reading images in TIFF format. Scope: local bookworm: open bullseye: open forky: open sid: open trixie: open

CVE-2024-28583 [HIGH] CVE-2024-28583: freeimage - Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a... Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the readLine() function when reading images in XPM format. Scope: local bookworm: open bullseye: open forky: open sid: open trixie: open

CVE-2024-28581 [HIGH] CVE-2024-28581: freeimage - Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a... Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the _assignPixel<>() function when reading images in TARGA format. Scope: local bookworm: open bullseye: open forky: open sid: open trixie: open

CVE-2024-28576 [MEDIUM] CVE-2024-28576: freeimage - Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a... Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the opj_j2k_tcp_destroy() function when reading images in J2K format. Scope: local bookworm: open bullseye: open forky: open sid: open trixie: open

CVE-2024-28574 [MEDIUM] CVE-2024-28574: freeimage - Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a... Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the opj_j2k_copy_default_tcp_and_create_tcd() function when reading images in J2K format. Scope: local bookworm: open bullseye: open forky: open sid: open trixie: open

CVE-2024-28577 [MEDIUM] CVE-2024-28577: freeimage - Null Pointer Dereference vulnerability in open source FreeImage v.3.19.0 [r1909]... Null Pointer Dereference vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the jpeg_read_exif_profile_raw() function when reading images in JPEG format. Scope: local bookworm: open bullseye: open forky: open sid: open trixie: open

CVE-2024-28572 [MEDIUM] CVE-2024-28572: freeimage - Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a... Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the FreeImage_SetTagValue() function when reading images in JPEG format. Scope: local bookworm: open bullseye: open forky: open sid: open trixie: open

CVE-2024-28565 [MEDIUM] CVE-2024-28565: freeimage - Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a... Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the psdParser::ReadImageData() function when reading images in PSD format. Scope: local bookworm: open bullseye: open forky: open sid: open trixie: open

CVE-2024-28568 [MEDIUM] CVE-2024-28568: freeimage - Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a... Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the read_iptc_profile() function when reading images in TIFF format. Scope: local bookworm: open bullseye: open forky: open sid: open trixie: open

CVE-2024-28567 [MEDIUM] CVE-2024-28567: freeimage - Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a... Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the FreeImage_CreateICCProfile() function when reading images in TIFF format. Scope: local bookworm: open bullseye: open forky: open sid: open trixie: open

CVE-2024-28579 [MEDIUM] CVE-2024-28579: freeimage - Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a... Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the FreeImage_Unload() function when reading images in HDR format. Scope: local bookworm: open bullseye: open forky: open sid: open trixie: open

CVE-2024-28563 [MEDIUM] CVE-2024-28563: freeimage - Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a... Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the Imf_2_2::DwaCompressor::Classifier::Classifier() function when reading images in EXR format. Scope: local bookworm: open bullseye: open forky: open sid: open trixie: open