CVE-2020-21428: Buffer Overflow
Published Aug 22, 2023
·Updated
Buffer Overflow vulnerability in function LoadRGB in PluginDDS.cpp in FreeImage 3.18.0 allows remote attackers to run arbitrary code and cause other impacts via crafted image file.
Affected Software
2 affected componentsFixes available
debian/freeimage
3.18.0+ds2-6+deb11u13.18.0+ds2-9+deb12u13.18.0+ds2-10
Freeimage Project Freeimage=3.18.0
Event History
Aug 22, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Jan 16, 2024
Data Sourced
via Launchpad·04:07 PM
Description
Sep 13, 2024
Data Sourced
via Ubuntu·11:28 PM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is CVE-2020-21428?
CVE-2020-21428 is a buffer overflow vulnerability in the function LoadRGB in PluginDDS.cpp in FreeImage 3.18.0.
2
What is the severity of CVE-2020-21428?
CVE-2020-21428 has a severity of 7.8 (high).
3
How does CVE-2020-21428 affect FreeImage?
CVE-2020-21428 allows remote attackers to run arbitrary code and cause other impacts via a crafted image file.
4
What is the CWE ID of CVE-2020-21428?
CVE-2020-21428 has CWE IDs 119 and 120.
5
Are there any patches available for CVE-2020-21428?
Yes, patches are available to fix CVE-2020-21428. Please refer to the referenced links for more information.