buildroot ▾
›
2025.02.x ▾
›
vulnerability
›
CVE-2024-31570
Component Overview
Vulnerability Overview
Name
CVE-2024-31570
Source
NVD (
link
)
Debian (
link
)
Description
libfreeimage in FreeImage 3.4.0 through 3.18.0 has a stack-based buffer overflow in the PluginXPM.cpp Load function via an XPM file.
CWEs
CWE-787
CWE-121
Published Date
Sep 19, 2024
Updated Date
Jun 17, 2026
Workaround
-
Advisories
https://sourceforge.net/p/freeimage/bugs/355/
Permissions Required
https://www.openwall.com/lists/oss-security/2024/04/11/10
Mailing List
Analysis
#
Affected Component
Analysis
libfreeimage
Exploitable
Vulnerability Ratings
#
9.8
CVSSv31
9.8
CVSSv31
NaN
other