Medium severity6.8NVD Advisory· Published Mar 20, 2024· Updated Jun 17, 2026
CVE-2024-28562
CVE-2024-28562
Description
Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the Imf_2_2::copyIntoFrameBuffer() component when reading images in EXR format.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:freeimage_project:freeimage:3.19.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:freeimage_project:freeimage:3.19.0:*:*:*:*:*:*:*
- (no CPE)range: = 3.19.0 [r1909]
- FreeImage/FreeImagedescription
Patches
Vulnerability mechanics
References
4- github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909nvdExploitThird Party Advisory
- www.openwall.com/lists/oss-security/2024/04/11/10nvdMailing ListThird Party Advisory
- www.openwall.com/lists/oss-security/2024/04/11/2nvdMailing ListThird Party Advisory
- www.openwall.com/lists/oss-security/2024/04/11/3nvdMailing ListThird Party Advisory
News mentions
0No linked articles in our index yet.