Approved changes feed: RSS · Atom

cpe:2.3:a:freeimage_project:freeimage:3.18.0:*:*:*:*:*:*:*

part: a version: 3.18.0 update: *

VendorFreeimage Project (a7785c6d-3913-5784-8ac1-657a54b7a884)
ProductFreeimage (f4872609-6563-5022-a944-aeb90b285e2b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/freeimage purl2cpe 2026-06-01 10:17:47.015069
pkg:deb/ubuntu/freeimage purl2cpe 2026-06-01 10:17:47.015070
pkg:github/danoli3/freeimage purl2cpe 2026-06-01 10:17:47.015072
pkg:github/kanma/freeimage purl2cpe 2026-06-01 10:17:47.015073
pkg:github/winmerge/freeimage purl2cpe 2026-06-01 10:17:47.015074
pkg:rpm/fedora/freeimage purl2cpe 2026-06-01 10:17:47.015076
pkg:rpm/opensuse/freeimage purl2cpe 2026-06-01 10:17:47.015077
pkg:sourceforge/freeimage purl2cpe 2026-06-01 10:17:47.015078

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-70968 vulnerable 2026-06-08 07:43:17.079878 Details available
FreeImage 3.18.0 contains a Use After Free in PluginTARGA.cpp;loadRLE().
Published: 2026-01-14T00:00:00.000Z
Updated: 2026-01-14T16:31:37.711Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47997 vulnerable 2026-06-08 06:14:25.918897 Details available
An issue discovered in BitmapAccess.cpp::FreeImage_AllocateBitmap in FreeImage 3.18.0 leads to an infinite loop and allows attackers to cause a denial of service.
Published: 2024-01-09T00:00:00.000Z
Updated: 2025-11-04T18:19:13.584Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47996 vulnerable 2026-06-08 06:14:25.918382 Details available
An integer overflow vulnerability in Exif.cpp::jpeg_read_exif_dir in FreeImage 3.18.0 allows attackers to obtain information and cause a denial of service.
Published: 2024-01-09T00:00:00.000Z
Updated: 2025-05-14T19:13:44.642Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47995 vulnerable 2026-06-08 06:14:25.917895 Details available
Memory Allocation with Excessive Size Value discovered in BitmapAccess.cpp::FreeImage_AllocateBitmap in FreeImage 3.18.0 allows attackers to cause a denial of service.
Published: 2024-01-09T00:00:00.000Z
Updated: 2025-11-04T18:19:11.092Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47994 vulnerable 2026-06-08 06:14:25.917218 Details available
An integer overflow vulnerability in LoadPixelDataRLE4 function in PluginBMP.cpp in Freeimage 3.18.0 allows attackers to obtain sensitive information, cause a denial of service and/or run arbitrary code.
Published: 2024-01-09T00:00:00.000Z
Updated: 2025-06-03T14:33:44.707Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47993 vulnerable 2026-06-08 06:14:25.916431 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47992 vulnerable 2026-06-08 06:14:25.915439 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33367 vulnerable 2026-06-08 05:32:11.410400 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-21428 vulnerable 2026-06-08 05:22:30.820149 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-21427 vulnerable 2026-06-08 05:22:30.819698 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-21426 vulnerable 2026-06-08 05:22:30.818963 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-12214 vulnerable 2026-06-08 05:12:38.692739 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-12213 vulnerable 2026-06-08 05:12:38.692036 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-12212 vulnerable 2026-06-08 05:12:38.691448 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-12211 vulnerable 2026-06-08 05:12:38.690895 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.