VDB
CVE-2020-21428
CVE-2020-21428
PUBLISHED
CVSS 7.800000190734863 HIGH
Buffer Overflow vulnerability in function LoadRGB in PluginDDS.cpp in FreeImage 3.18.0 allows remote attackers to run arbitrary code and cause other impacts via crafted image file.
EPSS 0.47% · 40.0th percentile
Risk Scores
CVSS 3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
0.47%
40.0th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu:22.04:LTS | freeimage | 3.18.0+ds2-6ubuntu4, 3.18.0+ds2-6ubuntu3, 0 |
| Ubuntu:Pro:18.04:LTS | freeimage | 0, 3.17.0+ds1-5+deb9u1build0.18.04.1, * |
| Ubuntu:Pro:14.04:LTS | freeimage | 3.15.4-2, 3.15.4-3ubuntu0.1+esm2, 3.15.4-3ubuntu0.1+esm1 |
| Ubuntu:24.04:LTS | freeimage | 0, 3.18.0+ds2-10build3, 3.18.0+ds2-10build2 |
| Ubuntu:Pro:16.04:LTS | freeimage | 3.15.4-4.1build1, 3.17.0+ds1-1.1, 3.17.0+ds1-2 |
| Ubuntu:20.04:LTS | freeimage | *, *, 3.18.0+ds2-1ubuntu1 |
Timeline
- Aug 22, 2023 CVE Published
- Aug 23, 2023 EPSS Score
- Sep 26, 2023 EPSS Score
- Oct 30, 2023 EPSS Score
- Dec 3, 2023 EPSS Score
- Jan 6, 2024 EPSS Score
- Feb 9, 2024 EPSS Score
- Mar 14, 2024 EPSS Score
- Apr 17, 2024 EPSS Score
- May 21, 2024 EPSS Score
- Jun 24, 2024 EPSS Score
- Jul 28, 2024 EPSS Score
References
- https://ubuntu.com/security/CVE-2020-21428 advisory
- https://ubuntu.com/security/notices/USN-6586-1 advisory
- https://sourceforge.net/p/freeimage/bugs/299/ third-party-advisory
- https://www.cve.org/CVERecord?id=CVE-2020-21428 third-party-advisory