CVE-2024-31570
libfreeimage in FreeImage 3.4.0 through 3.18.0 has a stack-based buffe ...
Severity by source
Trivy's own label is CRITICAL. Rated critical by NVD. Rated lower by Ubuntu (medium).
Description
libfreeimage in FreeImage 3.4.0 through 3.18.0 has a stack-based buffer overflow in the PluginXPM.cpp Load function via an XPM file.
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| debian 11 | freeimage | no fix listed |
| debian 12 | freeimage | no fix listed |
| debian 13 | freeimage | no fix listed |
| echo | freeimage | no fix listed |
| rapidfort alpine 3.20 | freeimage | no fix listed |
| rapidfort alpine 3.21 | freeimage | no fix listed |
| rapidfort alpine 3.22 | freeimage | no fix listed |
| rapidfort alpine 3.23 | freeimage | no fix listed |
| rapidfort alpine 3.24 | freeimage | no fix listed |
| rapidfort debian 12 | freeimage | no fix listed |
| rapidfort debian 13 | freeimage | no fix listed |
| ubuntu 18.04-ESM | freeimage | no fix listed |
Show all 17 entries from 17 sources
| Source | Package | Fixed in |
|---|---|---|
| debian 11 | freeimage | no fix listed |
| debian 12 | freeimage | no fix listed |
| debian 13 | freeimage | no fix listed |
| echo | freeimage | no fix listed |
| rapidfort alpine 3.20 | freeimage | no fix listed |
| rapidfort alpine 3.21 | freeimage | no fix listed |
| rapidfort alpine 3.22 | freeimage | no fix listed |
| rapidfort alpine 3.23 | freeimage | no fix listed |
| rapidfort alpine 3.24 | freeimage | no fix listed |
| rapidfort debian 12 | freeimage | no fix listed |
| rapidfort debian 13 | freeimage | no fix listed |
| ubuntu 18.04-ESM | freeimage | no fix listed |
| ubuntu 20.04-ESM | freeimage | no fix listed |
| ubuntu 22.04 | freeimage | no fix listed |
| ubuntu 24.04 | freeimage | no fix listed |
| ubuntu 26.04 | freeimage | no fix listed |
| ubuntu 26.10 | freeimage | no fix listed |