- Remove dependency on memalign PR: 129388 Submitted by: Jacob Atzen <jatzen@gmail.com>a5f3f72336
freeimage -- code execution vulnerabilityentered 2017-02-04
Port details
graphics/freeimage3.18.0_6
Simple C/C++ bitmap graphics library
- Maintainer
- eduardo@FreeBSD.org
- Packages
- freeimage 3.18.0_6
- Upstream
- Higher version available: 3.19.26
- CPE
freeimage_project:freeimagefrom the port- WWW
- http://freeimage.sourceforge.net/
- Links
- cgit · VuXML
Unaddressed (17) · The CVE record lists this version as affected, no VuXML entry names the CVE
| CVE-2025-70968 | 9.8 | 2026-01-14 | FreeImage 3.18.0 contains a Use After Free in PluginTARGA.cpp;loadRLE(). |
| CVE-2024-31570 | 9.8 | 2024-09-19 | libfreeimage in FreeImage 3.4.0 through 3.18.0 has a stack-based buffer overflow in the PluginXPM.cpp Load function via an XPM file. |
| CVE-2023-47992 | 8.8 | 2024-01-09 | An integer overflow vulnerability in FreeImageIO.cpp::_MemoryReadProc in FreeImage 3.18.0 allows attackers to obtain sensitive information, cause a denial-of-service att… |
| CVE-2023-47994 | 8.8 | 2024-01-09 | An integer overflow vulnerability in LoadPixelDataRLE4 function in PluginBMP.cpp in Freeimage 3.18.0 allows attackers to obtain sensitive information, cause a denial of … |
| CVE-2020-21428 | 7.8 | 2023-08-22 | Buffer Overflow vulnerability in function LoadRGB in PluginDDS.cpp in FreeImage 3.18.0 allows remote attackers to run arbitrary code and cause other impacts via crafted … |
| CVE-2020-21427 | 7.8 | 2023-08-22 | Buffer Overflow vulnerability in function LoadPixelDataRLE8 in PluginBMP.cpp in FreeImage 3.18.0 allows remote attackers to run arbitrary code and cause other impacts vi… |
| CVE-2020-21426 | 7.8 | 2023-08-22 | Buffer Overflow vulnerability in function C_IStream::read in PluginEXR.cpp in FreeImage 3.18.0 allows remote attackers to run arbitrary code and cause other impacts via … |
| CVE-2019-12211 | 7.5 | 2019-05-20 | When FreeImage 3.18.0 reads a tiff file, it will be handed to the Load function of the PluginTIFF.cpp file, but a memcpy occurs in which the destination address and the … |
| CVE-2019-12212 | 7.5 | 2019-05-20 | When FreeImage 3.18.0 reads a special JXR file, the StreamCalcIFDSize function of JXRMeta.c repeatedly calls itself due to improper processing of the file, eventually ca… |
| CVE-2019-12214 | 7.5 | 2019-05-20 | In FreeImage 3.18.0, an out-of-bounds access occurs because of mishandling of the OpenJPEG j2k_read_ppm_v3 function in j2k.c. The value of l_N_ppm comes from the file re… |
| CVE-2025-65803 | 6.5 | 2025-12-10 | An integer overflow in the psdParser::ReadImageData function of FreeImage v3.18.0 and before allows attackers to cause a Denial of Service (DoS) via supplying a crafted … |
| CVE-2023-47997 | 6.5 | 2024-01-10 | An issue discovered in BitmapAccess.cpp::FreeImage_AllocateBitmap in FreeImage 3.18.0 leads to an infinite loop and allows attackers to cause a denial of service. |
| CVE-2023-47993 | 6.5 | 2024-01-09 | A Buffer out-of-bound read vulnerability in Exif.cpp::ReadInt32 in FreeImage 3.18.0 allows attackers to cause a denial-of-service. |
| CVE-2023-47995 | 6.5 | 2024-01-09 | Memory Allocation with Excessive Size Value discovered in BitmapAccess.cpp::FreeImage_AllocateBitmap in FreeImage 3.18.0 allows attackers to cause a denial of service. |
| CVE-2023-47996 | 6.5 | 2024-01-09 | An integer overflow vulnerability in Exif.cpp::jpeg_read_exif_dir in FreeImage 3.18.0 allows attackers to obtain information and cause a denial of service. |
| CVE-2019-12213 | 6.5 | 2019-05-20 | When FreeImage 3.18.0 reads a special TIFF file, the TIFFReadDirectory function in PluginTIFF.cpp always returns 1, leading to stack exhaustion. |
| CVE-2021-33367 | 5.5 | 2023-02-22 | Buffer Overflow vulnerability in Freeimage v3.18.0 allows attacker to cause a denial of service via a crafted JXR file. |
VuXML only (0) · listed, port not fixed yet
None.
pkg audit reports nothing for this version.Fixed (3)
Show 3 fixed
VuXML entries whose affected range this version has left.
freeimage -- multiple integer overflowsentered 2015-12-13
dcraw -- integer overflow conditionentered 2015-05-15
Commits (62)
- Try to fix build on amd64 Reported by: QA Tindiec9530d16ae
- Update to 3.11.0aef10e4bd1
- Additional fix-it patch37bcd0d237
- Unbreak on amd64 - Fix on sparc64 - Move pkg-plist to PLIST_FILES - Take maintainship76b6ca5bf8
- Mark BROKEN on amd64: error: no matching function for call to `MIN(int&, long int) - While here, convert INSTALLS_SHLIB to USE_LDCONFIG4abeb0f326
Upgrade to 3.10.0.86a19a3a0b
Update to 3.9.3c505a741c9
Reset whitekid@gmail.com after timeouts and no response to email. Hat: portmgr2db91e4f1f
- update to 3.8.0 PR: ports/97200 Submitted by: Martin Wilke <freebsd_AT_unixfreunde dot de> Approved by: maintainer (Choe, Cheng-Dae)d751732a3a
SHA256ify Approved by: krion@c92c635b24
FreeImage is an Open Source library project for developers who would like to support popular graphics image formats like PNG, BMP, JPEG, TIFF and others as needed by today's multimedia applications. FreeImage is easy to use, fast, multithreading safe, compatible with all 32-bit versions of Windows, and cross-platform (works both with Linux and Mac OS X). PR: ports/85552 Submitted by: "Choe, Cheng-Dae" <whitekid@gmail.com>4d78a5a768