CVE-2024-28584: Freeimage Project Freeimage
Low severity, CVSS 3.3. EPSS: 0.4% chance of exploitation in the next 30 days.
Null Pointer Dereference vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the J2KImageToFIBITMAP() function when reading images in J2K format.
Affected products
- Freeimage Project Freeimage: version 3.19.0 only
Published 2024-03-20. Last modified 2026-06-17.