Medium severity5.5NVD Advisory· Published Mar 20, 2024· Updated Jun 17, 2026

CVE-2024-28577

Description

Null Pointer Dereference vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the jpeg_read_exif_profile_raw() function when reading images in JPEG format.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

FreeImage/FreeImagedescription
Freeimage Project/Freeimagellm-fuzzy
Range: = 3.19.0 [r1909]

Patches

Vulnerability mechanics

References

github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000