Linux · 
Ubuntu · Package update · August 22, 2023
Ubuntu · Package update · August 22, 2023libfreeimage3 3.18.0+ds2-10build4: libfreeimage3 3.18.0+ds2-10build4 for Ubuntu 24.04.5 LTS (noble)
libfreeimage3 3.18.0+ds2-10build4, released August 22, 2023, fixes 4 CVEs in libfreeimage3. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
4
None rated Critical
Exploited
0
None reported
Highest CVSS
7.8
Base score, 0 to 10
Highest EPSS
0.0190
79th percentile
Priority of the 4 CVEs
Patch now 0
Urgent 0
High 2
Routine 2
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| libfreeimage3 | Ubuntu 24.04.5 LTS (noble) | 3.18.0+ds2-10build4 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| High | CVE-2020-21427 | libfreeimage3: Buffer Overflow vulnerability in function LoadPixelDataRLE8 inPluginBMP.cpp in FreeImage 3.18.0 allows remote attacke... | 7.8 | 0.0052 | None reported |
| High | CVE-2020-21428 | libfreeimage3: Buffer Overflow vulnerability in function LoadRGB in PluginDDS.cpp inFreeImage 3.18.0 allows remote attackers to run... | 7.8 | 0.0047 | None reported |
| Routine | CVE-2019-12212 | libfreeimage3: When FreeImage 3.18.0 reads a special JXR file, the StreamCalcIFDSizefunction of JXRMeta.c repeatedly calls itself du... | n/a | 0.0190 | None reported |
| Routine | CVE-2020-22524 | libfreeimage3: Buffer Overflow vulnerability in FreeImage_Load function in FreeImageLibrary 3.19.0(r1828) allows attackers to cuase... | 6.5 | 0.0106 | None reported |
Showing 1 to 4 of 4
1
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.