Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
When FreeImage 3.18.0 reads a special JXR file, the StreamCalcIFDSize function of JXRMeta.c repeatedly calls itself due to improper processing of the file, eventually causing stack exhaustion. An attacker can achieve a remote denial of service attack by sending a specially constructed file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
FreeImage 资源管理错误漏洞
Vulnerability Description
FreeImage是一个跨平台的用于支持流行的图形图像格式的开源库。 FreeImage 3.18.0版本中存在安全漏洞,该漏洞源于程序没有正确地处理不断被调用的JXR文件。攻击者可利用该漏洞造成拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A