CVE-2020-21427: Buffer Overflow
Published Aug 22, 2023
·Updated
Buffer Overflow vulnerability in function LoadPixelDataRLE8 in PluginBMP.cpp in FreeImage 3.18.0 allows remote attackers to run arbitrary code and cause other impacts via crafted image file.
Affected Software
2 affected componentsFixes available
debian/freeimage
3.18.0+ds2-6+deb11u13.18.0+ds2-9+deb12u13.18.0+ds2-10
Freeimage Project Freeimage=3.18.0
Event History
Aug 22, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·07:16 PM
DescriptionSeverityWeaknessAffected Software
Jan 16, 2024
Data Sourced
via Launchpad·04:07 PM
Description
Sep 13, 2024
Data Sourced
via Ubuntu·11:28 PM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is CVE-2020-21427?
CVE-2020-21427 is a buffer overflow vulnerability in the function LoadPixelDataRLE8 in PluginBMP.cpp in FreeImage 3.18.0.
2
How does CVE-2020-21427 manifest?
CVE-2020-21427 allows remote attackers to run arbitrary code and cause other impacts via a crafted image file.
3
What is the severity of CVE-2020-21427?
The severity of CVE-2020-21427 is rated as high, with a CVSS score of 7.8.
4
What software versions are affected by CVE-2020-21427?
CVE-2020-21427 affects FreeImage version 3.18.0.
5
How can I fix CVE-2020-21427?
To fix CVE-2020-21427, update FreeImage to a version that is not affected by the vulnerability.