CVE-2024-31570: stack-based buffer overflow in the PluginXPM.cpp Load...

Brought to you by: drolon, noescom

#386 CVE-2024-31570: stack-based buffer overflow in the PluginXPM.cpp Load function when handling XPM files

Status: open

Owner: nobody

Labels: None

Priority: 5

Updated: 2024-10-08

Created: 2024-10-07

Creator: Santiago R.R.

Private: No

In FreeImage library version 3.19.0 [r1909], when reading images in XPM format, the Load() function has a stack overflow write vulnerability, which may lead to a command execution.

The aim of this ticket is to forward upstream the vulnerabilities published at
https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909.
Please see there for more details.

Commit: [r1909]

Discussion

Santiago R.R. - 2024-10-08

This is probably a duplicate of #355 (it is currently private, and I don't have access to it)

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

CVE-2024-31570: stack-based buffer overflow in the PluginXPM.cpp Load...

Group

Searches

Help

#386 CVE-2024-31570: stack-based buffer overflow in the PluginXPM.cpp Load function when handling XPM files

Related

Discussion