An integer overflow vulnerability in FreeImageIO.cpp::_MemoryReadProc in FreeImage 3.18.0 allows attackers to obtain sensitive information, cause a denial-of-service attacks and/or run arbitrary code.
References
Link | Resource |
---|---|
https://github.com/thelastede/FreeImage-cve-poc/tree/master/CVE-2023-47992 | Exploit Third Party Advisory |
Configurations
History
16 Jan 2024, 21:03
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-190 | |
First Time |
Freeimage Project
Freeimage Project freeimage |
|
CPE | cpe:2.3:a:freeimage_project:freeimage:3.18.0:*:*:*:*:*:*:* | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
References | () https://github.com/thelastede/FreeImage-cve-poc/tree/master/CVE-2023-47992 - Exploit, Third Party Advisory |
09 Jan 2024, 23:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-01-09 23:15
Updated : 2024-02-28 20:54
NVD link : CVE-2023-47992
Mitre link : CVE-2023-47992
CVE.ORG link : CVE-2023-47992
JSON object : View
Products Affected
freeimage_project
- freeimage
CWE
CWE-190
Integer Overflow or Wraparound