High severity7.8NVD Advisory· Published Aug 22, 2023· Updated Jun 17, 2026
CVE-2020-21426
CVE-2020-21426
Description
Buffer Overflow vulnerability in function C_IStream::read in PluginEXR.cpp in FreeImage 3.18.0 allows remote attackers to run arbitrary code and cause other impacts via crafted image file.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- FreeImage/FreeImagedescription
cpe:2.3:a:freeimage_project:freeimage:3.18.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:freeimage_project:freeimage:3.18.0:*:*:*:*:*:*:*
- (no CPE)range: =3.18.0
Patches
Vulnerability mechanics
References
3- sourceforge.net/p/freeimage/bugs/300/nvdThird Party Advisory
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RUEK2JOVJBQZVNQIIZZO3JFMTVB4R5KS/nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UGOMCRAANNCQYJYPPMGRQWKRZGIP6NME/nvd
News mentions
0No linked articles in our index yet.