CVE-2024-31570: Freeimage Project Freeimage

Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days.

libfreeimage in FreeImage 3.4.0 through 3.18.0 has a stack-based buffer overflow in the PluginXPM.cpp Load function via an XPM file.

Affected products

• Freeimage Project Freeimage: from 3.4.0, up to and including 3.18.0

Published 2024-09-19. Last modified 2026-06-17.