CVE-2024-9029: Freeimage Project Freeimage

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

A flaw was found in the freeimage library. Processing a crafted image can cause a buffer over-read of 1 byte in the read_iptc_profile function in the Source/Metadata/IPTC.cpp file because the size of the profile is not being sanitized, causing a crash in the application linked to the library, resulting in a denial of service.

Affected products

• Freeimage Project Freeimage: affected versions not specified

Published 2024-09-27. Last modified 2026-06-17.