CVE-2022-4988 Alien::FreeImage versions through 1.001 for Perl contains several vulnerable libraries
Alien::FreeImage bundles outdated FreeImage libraries with known vulnerabilities, allowing attackers to exploit these flaws via the Perl module.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-4988?
CVE-2022-4988 is a high-severity vulnerability in KMX Alien::FreeImage, published on 11 May 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Alien::FreeImage versions through 1.001 for Perl contains several vulnerable libraries.
Alien::FreeImage contains version 3.17.0 of the FreeImage library from 2017, which has known vulnerabilities such as CVE-2015-0852 and CVE-2025-65803. The library embeds other images libraries that also have known vulnerabilities.
Weakness: CWE-1395
Which versions are affected by CVE-2022-4988?
How do I fix CVE-2022-4988?
No fix has been published for CVE-2022-4988 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-4988 being exploited?
There is no known exploitation of CVE-2022-4988 in the wild and no public exploit code.
Sources
Also known as GHSA-wqrc-gg3r-jw9v.