CVE-2023-47992

An integer overflow vulnerability in FreeImageIO.cpp::_MemoryReadProc in FreeImage 3.18.0 allows attackers to obtain sensitive information, cause a denial-of-service attacks and/or run arbitrary code.

Score

CVSS 3.1 8.8 High

Status

Modified - cve@mitre.org

Published

2024-01-09

Last modified

2025-06-17

Weaknesses

CWE-190

Affected products

• Freeimage (Freeimage Project)

References

• https://github.com/thelastede/FreeImage-cve-poc/tree/master/CVE-2023-47992