CVE-2023-47995

概要

参考情報

• thelastede/FreeImage-cve-poc
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EDK7DSADYUHJFNVSRGJHEFJGMWRGGDLM
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K3ZNVRL5PCTMMA3ZBDKH5WH4RT4ST3HW
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VLDUDJOWZAKBQMQ7XYNJTRCFPOB56BOE
• lists.fedoraproject.org/archives/list/[email protected]/message/EDK7DSADYUHJFNVSRGJHEFJGMWRGGDLM
• lists.fedoraproject.org/archives/list/[email protected]/message/K3ZNVRL5PCTMMA3ZBDKH5WH4RT4ST3HW

freeimage のその他の脆弱性

• CVE-2025-70968緊急 9.8FreeImage 3.18.0 contains a Use After Free in PluginTARGA.cpp;loadRLE().
• CVE-2025-65803中 6.5An integer overflow in the psdParser::ReadImageData function of FreeImage v3.18.0 and before allows attackers to cause a Denial of Service (…
• CVE-2024-31570緊急 9.8libfreeimage in FreeImage 3.4.0 through 3.18.0 has a stack-based buffer overflow in the PluginXPM.cpp Load function via an XPM file.
• CVE-2024-28584低 3.3Null Pointer Dereference vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) …
• CVE-2024-28583高 7.8Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the readLine()…