buildroot ▾
›
2025.02.x ▾
›
vulnerability
›
CVE-2020-21426
Component Overview
Vulnerability Overview
Name
CVE-2020-21426
Source
NVD (
link
)
Debian (
link
)
Description
Buffer Overflow vulnerability in function C_IStream::read in PluginEXR.cpp in FreeImage 3.18.0 allows remote attackers to run arbitrary code and cause other impacts via crafted image file.
CWEs
CWE-120
Published Date
Aug 22, 2023
Updated Date
Jun 17, 2026
Workaround
-
Advisories
https://sourceforge.net/p/freeimage/bugs/300/
Third Party Advisory
https://sourceforge.net/p/freeimage/bugs/300/
Third Party Advisory
Analysis
#
Affected Component
Analysis
libfreeimage
Exploitable
Vulnerability Ratings
#
7.8
CVSSv31
NaN
other