Freeimage · Freeimage · CVE-2024-28562
**Name of the Vulnerable Software and Affected Versions**
FreeImage version 3.19.0 [r1909]
**Description**
The issue is a buffer overflow vulnerability that allows a local attacker to execute arbitrary code via the `Imf 2 2::copyIntoFrameBuffer()` component when reading images in EXR format.
**Recommendations**
For FreeImage version 3.19.0 [r1909], as a temporary workaround, consider disabling the `Imf 2 2::copyIntoFrameBuffer()` function until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.