Buffer overflow in FreeImage - CVE-2020-22524

Vulnerability identifier: #VU80063

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2020-22524

CWE-ID: CWE-119

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary error within the FreeImage_Load() function in PluginPFM.cpp. A remote attacker can pass a specially crafted PFM file to the application to trigger memory corruption and perform a denial of service (DoS) attack.

FreeImage
Debian Linux
Ubuntu
Fedora
libfreeimage3 (Ubuntu package)
libfreeimageplus3 (Ubuntu package)
freeimage (Debian package)
mingw-freeimage
freeimage

Install update from vendor's SVN.

libfreeimage3 (Ubuntu package) - addressed in versions Ubuntu Pro, 3.18.0+ds2-9.1ubuntu0.1, 3.18.0+ds2-9ubuntu0.1, 3.18.0+ds2-1ubuntu3.1, 3.18.0+ds2-6ubuntu5.1
libfreeimageplus3 (Ubuntu package) - addressed in versions Ubuntu Pro, 3.18.0+ds2-9.1ubuntu0.1, 3.18.0+ds2-9ubuntu0.1, 3.18.0+ds2-1ubuntu3.1, 3.18.0+ds2-6ubuntu5.1
freeimage (Debian package) - addressed in versions 3.18.0+ds2-6+deb11u1, 3.18.0+ds2-9+deb12u1
mingw-freeimage - addressed in versions 3.19.0-0.16.svn1909.fc38, 3.19.0-0.16.svn1909.fc39
freeimage - addressed in versions 3.19.0-0.19.svn1909.fc38, 3.19.0-0.19.svn1909.fc39

• https://sourceforge.net/p/freeimage/bugs/319/

• Fedora 38 update for freeimage, mingw-freeimage
• Fedora 39 update for freeimage, mingw-freeimage
• Multiple vulnerabilities in FreeImage
• Debian update for freeimage
• Ubuntu update for freeimage