PoC Index

CVE-2023-47994

HIGH 8.8EPSS 0.7%

An integer overflow vulnerability in LoadPixelDataRLE4 function in PluginBMP.cpp in Freeimage 3.18.0 allows attackers to obtain sensitive information, cause a denial of service and/or run arbitrary code.

CVSS v3.1
8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v3.1
8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.72% chance of exploitation in the next 30 days, 51th percentile
Published
2024-01-09
Updated
2025-06-03

Proof-of-concept exploits (1)

References

Related