oss-security - Re: CWE-121, CWE-122: libfreeimage 3.40-3.18/19+ buffer overflow

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <CAG-20GTcXSo3=1UxEbRf7Ut_2j_g=Ru4yGHUQOxNSLMvvR-Umg@mail.gmail.com>
Date: Thu, 11 Apr 2024 16:22:35 +0800
From: Tianyu Chen <billchenchina2001@...il.com>
To: oss-sec@...ap.com
Cc: oss-security@...ts.openwall.com
Subject: Re: CWE-121, CWE-122: libfreeimage 3.40-3.18/19+ buffer overflow

Hi Michael,

I believe there may be a duplicate report for freeimage that you should be
aware of. You can find it at the following link:

https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909

The linked report includes CVE-2024-28562, CVE-2024-28563, CVE-2024-28564,
CVE-2024-28565, and more up to CVE-2024-28584.

Best regards,
Tianyu Chen

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.