ByteOS Network

Vulnerability Details :

CVE-2020-24294

Assigner-mitre

Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At-22 Aug, 2023 | 00:00

Updated At-03 Oct, 2024 | 18:41

Buffer Overflow vulnerability in psdParser::UnpackRLE function in PSDParser.cpp in FreeImage 3.19.0 [r1859] allows remote attackers to cuase a denial of service via opening of crafted psd file.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:mitre

Assigner Org ID:8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At:22 Aug, 2023 | 00:00

Updated At:03 Oct, 2024 | 18:41

▼CVE Numbering Authority (CNA)

Buffer Overflow vulnerability in psdParser::UnpackRLE function in PSDParser.cpp in FreeImage 3.19.0 [r1859] allows remote attackers to cuase a denial of service via opening of crafted psd file.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
https://sourceforge.net/p/freeimage/discussion/36111/thread/afb98701eb/	N/A

Hyperlink: https://sourceforge.net/p/freeimage/discussion/36111/thread/afb98701eb/

Resource: N/A

▼Authorized Data Publishers (ADP)

1. CVE Program Container

References

Hyperlink	Resource
https://sourceforge.net/p/freeimage/discussion/36111/thread/afb98701eb/	x_transferred

Hyperlink: https://sourceforge.net/p/freeimage/discussion/36111/thread/afb98701eb/

Resource:

x_transferred

2. CISA ADP Vulnrichment

Metrics Other Info

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:cve@mitre.org

Published At:22 Aug, 2023 | 19:16

Updated At:25 Aug, 2023 | 15:44

Buffer Overflow vulnerability in psdParser::UnpackRLE function in PSDParser.cpp in FreeImage 3.19.0 [r1859] allows remote attackers to cuase a denial of service via opening of crafted psd file.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	6.5	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Type: Primary

Version: 3.1

Base score: 6.5

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CPE Matches

freeimage_project>>freeimage>>3.19.0

cpe:2.3:a:freeimage_project:freeimage:3.19.0:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-120	Primary	nvd@nist.gov

CWE ID: CWE-120

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://sourceforge.net/p/freeimage/discussion/36111/thread/afb98701eb/	cve@mitre.org	Exploit

Hyperlink: https://sourceforge.net/p/freeimage/discussion/36111/thread/afb98701eb/

Source: cve@mitre.org

Resource:

Exploit

Similar CVEs

56Records found

CVE-2022-2211

Matching Score-4

Assigner-Red Hat, Inc.

View Details

Matching Score-4

Assigner-Red Hat, Inc.

CVSS Score-6.5||MEDIUM

EPSS-0.10% / 27.70%

7 Day CHG~0.00%

Published-12 Jul, 2022 | 20:33

Updated-03 Aug, 2024 | 00:32

A vulnerability was found in libguestfs. This issue occurs while calculating the greatest possible number of matching keys in the get_keys() function. This flaw leads to a denial of service, either by mistake or malicious actor.

Vendor-libguestfs n/a Red Hat, Inc.

Product-libguestfs enterprise_linux libguestfs

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2020-22628

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-6.5||MEDIUM

EPSS-0.06% / 18.83%

7 Day CHG~0.00%

Published-22 Aug, 2023 | 00:00

Updated-05 May, 2025 | 14:12

Buffer Overflow vulnerability in LibRaw::stretch() function in libraw\src\postprocessing\aspect_ratio.cpp.

Vendor-libraw n/a

Product-libraw n/a

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2023-32181

Matching Score-4

Assigner-SUSE

View Details

Matching Score-4

Assigner-SUSE

CVSS Score-3.3||LOW

EPSS-0.06% / 19.63%

7 Day CHG~0.00%

Published-01 Jun, 2023 | 11:46

Updated-10 Jan, 2025 | 19:15

Stack buffer overflow in "econf_writeFile" function

A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in openSUSE libeconf allows for DoS via malformed configuration files This issue affects libeconf: before 0.5.2.

Vendor-openSUSE

Product-libeconf libeconf

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2023-3618

Matching Score-4

Assigner-Red Hat, Inc.

View Details

Matching Score-4

Assigner-Red Hat, Inc.

CVSS Score-6.5||MEDIUM

EPSS-0.21% / 42.76%

7 Day CHG~0.00%

Published-12 Jul, 2023 | 14:06

Updated-26 Sep, 2024 | 19:26

Segmentation fault in fax3encode in libtiff/tif_fax3.c

A flaw was found in libtiff. A specially crafted tiff file can lead to a segmentation fault due to a buffer overflow in the Fax3Encode function in libtiff/tif_fax3.c, resulting in a denial of service.

Vendor-n/a LibTIFF Red Hat, Inc.Fedora Project Debian GNU/Linux

Product-libtiff debian_linux enterprise_linux libtiff Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 6 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Fedora

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2024-57513

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-6.5||MEDIUM

EPSS-0.05% / 16.65%

7 Day CHG~0.00%

Published-29 Jan, 2025 | 00:00

Updated-31 Jan, 2025 | 20:15

A floating-point exception (FPE) vulnerability exists in the AP4_TfraAtom::AP4_TfraAtom function in Bento4.

Vendor-n/a

Product-n/a

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2020-35776

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-6.5||MEDIUM

EPSS-0.10% / 28.31%

7 Day CHG~0.00%

Published-18 Feb, 2021 | 19:57

Updated-04 Aug, 2024 | 17:09

A buffer overflow in res_pjsip_diversion.c in Sangoma Asterisk versions 13.38.1, 16.15.1, 17.9.1, and 18.1.1 allows remote attacker to crash Asterisk by deliberately misusing SIP 181 responses.

Vendor-n/a Digium, Inc.

Product-asterisk n/a

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2020-24294

Credits

Vendors

Products

Metrics (CVSS)

Weaknesses

Attack Patterns

Solution/Workaround

References

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

Stakeholder-Specific Vulnerability Categorization (SSVC)

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History

Similar CVEs