CVE-2024-9029

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A flaw was found in the freeimage library. Processing a crafted image can cause a buffer over-read of 1 byte in the read_iptc_profile function in the Source/Metadata/IPTC.cpp file because the size of the profile is not being sanitized, causing a crash in the application linked to the library, resulting in a denial of service.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-126

Affected software

Vendor	Product	Versions
—	—	—
freeimage_project	freeimage	< *

References

https://bugzilla.redhat.com/show_bug.cgi?id=2313704Issue Tracking, Third Party Advisory
https://sourceforge.net/p/freeimage/bugs/351/Exploit, Issue Tracking

Timeline

Published: Sep 27, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-90305.4A vulnerability classified as problematic was found in CodeCanyon CRMGo SaaS 7.2. This vulnerability affects unknown code of the file /deal/CVE-2024-90315.4A vulnerability, which was classified as problematic, has been found in CodeCanyon CRMGo SaaS up to 7.2. This issue affects some unknown pro CVE-2024-90328.8A vulnerability, which was classified as critical, was found in SourceCodester Simple Forum-Discussion System 1.0. Affected is an unknown fu CVE-2024-90335.4A vulnerability has been found in SourceCodester Best House Rental Management System 1.0 and classified as problematic. Affected by this vul CVE-2024-90347.3A vulnerability was found in code-projects Patient Record Management System 1.0 and classified as critical. Affected by this issue is some u CVE-2024-90357.3A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been classified as critical. This affects an unknown par CVE-2024-90366.3A vulnerability was found in itsourcecode Online Bookstore 1.0. It has been rated as critical. This issue affects some unknown processing of CVE-2024-90377.3A vulnerability classified as critical has been found in Codezips Internal Marks Calculation 1.0. Affected is an unknown function of the fil CVE-2024-90389.8A vulnerability classified as problematic was found in Codezips Online Shopping Portal 1.0. Affected by this vulnerability is an unknown fun CVE-2024-90399.8A vulnerability, which was classified as critical, has been found in SourceCodester Best House Rental Management System 1.0. Affected by thi CVE-2024-90405.5A vulnerability, which was classified as problematic, was found in code-projects Blood Bank Management System 1.0. This affects an unknown p CVE-2024-90418.8A vulnerability has been found in SourceCodester Best House Rental Management System 1.0 and classified as critical. This vulnerability affe