p PatchFirst

CVE-2020-21427

CVE-2020-21427

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Buffer Overflow vulnerability in function LoadPixelDataRLE8 in PluginBMP.cpp in FreeImage 3.18.0 allows remote attackers to run arbitrary code and cause other impacts via crafted image file.

CVSS 7.8 · High · EPSS 0.5% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • freeimage Debian:12

    Versions
    • 3.18.0+ds2-9
    Affected ranges
    • ECOSYSTEM: < 3.18.0+ds2-9+deb12u1

    Update to 3.18.0+ds2-9+deb12u1

  • freeimage Debian:13

    Affected ranges
    • ECOSYSTEM: < 3.18.0+ds2-10

    Update to 3.18.0+ds2-10

  • freeimage Ubuntu:Pro:14.04:LTS

    Versions
    • 3.15.1-2build1
    • 3.15.1-2build2
    • 3.15.4-2
    • 3.15.4-3
    • 3.15.4-3ubuntu0.1
    • 3.15.4-3ubuntu0.1+esm1
    • 3.15.4-3ubuntu0.1+esm2
    Affected ranges
    • ECOSYSTEM: < 3.15.4-3ubuntu0.1+esm3

    Update to 3.15.4-3ubuntu0.1+esm3

  • freeimage Ubuntu:Pro:16.04:LTS

    Versions
    • 3.15.4-4.1build1
    • 3.15.4-6
    • 3.17.0+ds1-1.1
    • 3.17.0+ds1-2
    • 3.17.0+ds1-2ubuntu0.1
    Affected ranges
    • ECOSYSTEM: < 3.17.0+ds1-2ubuntu0.1+esm1

    Update to 3.17.0+ds1-2ubuntu0.1+esm1

  • freeimage Ubuntu:Pro:18.04:LTS

    Versions
    • 3.17.0+ds1-5build2
    • 3.17.0+ds1-5+deb9u1build0.18.04.1
    Affected ranges
    • ECOSYSTEM: < 3.17.0+ds1-5+deb9u1ubuntu0.1~esm1

    Update to 3.17.0+ds1-5+deb9u1ubuntu0.1~esm1

  • freeimage Ubuntu:20.04:LTS

    Versions
    • 3.18.0+ds2-1ubuntu1
    • 3.18.0+ds2-1ubuntu2
    • 3.18.0+ds2-1ubuntu3
    Affected ranges
    • ECOSYSTEM: < 3.18.0+ds2-1ubuntu3.1

    Update to 3.18.0+ds2-1ubuntu3.1

  • freeimage Ubuntu:22.04:LTS

    Versions
    • 3.18.0+ds2-6ubuntu3
    • 3.18.0+ds2-6ubuntu4
    • 3.18.0+ds2-6ubuntu5
    Affected ranges
    • ECOSYSTEM: < 3.18.0+ds2-6ubuntu5.1

    Update to 3.18.0+ds2-6ubuntu5.1

  • freeimage Ubuntu:24.04:LTS

    Versions
    • 3.18.0+ds2-9.1
    • 3.18.0+ds2-10
    • 3.18.0+ds2-10build2
    • 3.18.0+ds2-10build3
    Affected ranges
    • ECOSYSTEM: < 3.18.0+ds2-10build4

    Update to 3.18.0+ds2-10build4

  • freeimage Ubuntu:25.10

    Versions
    • 3.18.0+ds2-11
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • freeimage Ubuntu:26.10

    Versions
    • 3.18.0+ds2-11build1
    • 3.18.0+ds2-11build2
    • 3.18.0+ds2-11build3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • freeimage Ubuntu:26.04:LTS

    Versions
    • 3.18.0+ds2-11
    • 3.18.0+ds2-11build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →