vulnerability

Ubuntu: (CVE-2024-28580): freeimage vulnerability

Try Surface Command

Back to search

Severity

CVSS

(AV:L/AC:L/Au:N/C:C/I:C/A:C)

Published

Mar 20, 2024

Added

Jun 26, 2025

Modified

Mar 27, 2026

Description

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the ReadData() function when reading images in RAS format.

Solution

no-fix-ubuntu-package

References

CVE-2024-28580
https://attackerkb.com/topics/CVE-2024-28580
CWE-121
EUVD-EUVD-2024-25677
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-25677
https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909
https://www.cve.org/CVERecord?id=CVE-2024-28580

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report