CVE-2020-22524 Memory corruption in n/a
Attackers can cause a denial of service in applications using the FreeImage library by providing a crafted PFM file.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2020-22524?
CVE-2020-22524 is a medium-severity memory corruption vulnerability in Freeimage Project Freeimage, published on 22 Aug 2023. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Buffer Overflow vulnerability in FreeImage_Load function in FreeImage Library 3.19.0(r1828) allows attackers to cuase a denial of service via crafted PFM file.
Weakness: CWE-120
Which versions are affected by CVE-2020-22524?
It affects 1 product.
Products include Freeimage Project Freeimage.
How do I fix CVE-2020-22524?
Upgrade to a fixed version.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2020-22524 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2020-22524 exists.
Other vulnerabilities in Freeimage Project Freeimage
Sources
Also known as DEBIAN-CVE-2020-22524, GHSA-qrgg-mgwx-hq8f, UBUNTU-CVE-2020-22524.