CVE-2024-28568: Buffer Overflow in read_iptc_profile()

Brought to you by: drolon, noescom

#369 CVE-2024-28568: Buffer Overflow in read_iptc_profile()

Status: open

Owner: nobody

Labels: None

Priority: 5

Updated: 2024-10-07

Created: 2024-10-07

Creator: Santiago R.R.

Private: No

Buffer Overflow vulnerability in open source FreeImage v.3.19.0
[r1909] allows a local attacker to cause a denial of service (DoS) via
the read_iptc_profile() function when reading images in TIFF format.

The aim of this ticket is to forward upstream the vulnerabilities published at
https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909.
Please see there for more details.

Commit: [r1909]

CVE-2024-28568: Buffer Overflow in read_iptc_profile()

Group

Searches

Help

#369 CVE-2024-28568: Buffer Overflow in read_iptc_profile()

Related

Discussion