Description

A flaw was found in the freeimage library. Processing a crafted image can cause a buffer over-read of 1 byte in the read_iptc_profile function in the Source/Metadata/IPTC.cpp file because the size of the profile is not being sanitized, causing a crash in the application linked to the library, resulting in a denial of service.

INFO

Published Date :

2024-09-27T06:51:07.624Z

Last Modified :

2024-09-27T14:32:22.293Z

Source :

fedora
AFFECTED PRODUCTS

The following products are affected by CVE-2024-9029 vulnerability.

Vendors Products
Freeimage Project
  • Freeimage
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-9029.

URL Resource
https://bugzilla.redhat.com/show_bug.cgi?id=2313704 cve-icon cve-icon
https://sourceforge.net/p/freeimage/bugs/351/ cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact