CVE-2024-28576

Publication date 20 March 2024

Last updated 16 January 2025


Ubuntu priority

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the opj_j2k_tcp_destroy() function when reading images in J2K format.

Read the notes from the security team

Status

Package Ubuntu Release Status
freeimage 24.10 oracular
Vulnerable, fix deferred
24.04 LTS noble
Vulnerable, fix deferred
23.10 mantic Ignored end of life, was needs-triage
22.04 LTS jammy
Vulnerable, fix deferred
20.04 LTS focal
Vulnerable, fix deferred
18.04 LTS bionic
Vulnerable, fix deferred
16.04 LTS xenial
Vulnerable, fix deferred
14.04 LTS trusty Ignored end of ESM support, was needs-triage

Notes


juliaphoebe

Patch code not available upstream as of 2025-01-16