CVE-2024-28567

Name of the Vulnerable Software and Affected Versions FreeImage version 3.19.0 [r1909]

Description The issue is a buffer overflow that allows a local attacker to cause a denial of service (DoS) via the FreeImage CreateICCProfile() function when reading images in TIFF format. This occurs in the open-source FreeImage library.

Recommendations For FreeImage version 3.19.0 [r1909], as a temporary workaround, consider disabling the FreeImage CreateICCProfile() function until a patch is available. Restrict access to reading images in TIFF format to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.