Buffer overflow in FreeImage - CVE-2020-21428

Vulnerability identifier: #VU80071

CSH Severity: High

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2020-21428

CWE-ID: CWE-119

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error within the LoadRGB() function in PluginDDS.cpp. A remote attacker can trigger memory corruption and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

FreeImage
Debian Linux
Ubuntu
openEuler
Fedora
libfreeimageplus3 (Ubuntu package)
libfreeimage3 (Ubuntu package)
freeimage (Debian package)
freeimage-devel
freeimage
mingw-freeimage

Install updates from vendor's SVN.

libfreeimageplus3 (Ubuntu package) - addressed in versions Ubuntu Pro, 3.18.0+ds2-9.1ubuntu0.1, 3.18.0+ds2-9ubuntu0.1, 3.18.0+ds2-1ubuntu3.1, 3.18.0+ds2-6ubuntu5.1
libfreeimage3 (Ubuntu package) - addressed in versions Ubuntu Pro, 3.18.0+ds2-9.1ubuntu0.1, 3.18.0+ds2-9ubuntu0.1, 3.18.0+ds2-1ubuntu3.1, 3.18.0+ds2-6ubuntu5.1
freeimage (Debian package) - addressed in versions 3.18.0+ds2-6+deb11u1, 3.18.0+ds2-9+deb12u1
freeimage-devel - update to 3.18.0-5
freeimage - update to 3.18.0-5
mingw-freeimage - addressed in versions 3.19.0-0.16.svn1909.fc38, 3.19.0-0.16.svn1909.fc39
freeimage - addressed in versions 3.19.0-0.19.svn1909.fc38, 3.19.0-0.19.svn1909.fc39

• https://sourceforge.net/p/freeimage/bugs/299/
• https://sourceforge.net/p/freeimage/patches/143/

• Fedora 38 update for freeimage, mingw-freeimage
• Fedora 39 update for freeimage, mingw-freeimage
• Multiple vulnerabilities in FreeImage
• Debian update for freeimage
• Ubuntu update for freeimage
• openEuler update for freeimage