Freeimage up to 1.17.x inFreeImageTag.cpp FreeImage_CloneTag null pointer dereference

Summaryinfo

A vulnerability described as problematic has been identified in Freeimage up to 1.17.x. The impacted element is the function FreeImage_CloneTag of the file inFreeImageTag.cpp. The manipulation results in null pointer dereference. This vulnerability is identified as CVE-2021-40264. There is not any exploit available. Upgrading the affected component is recommended.

Detailsinfo

A vulnerability classified as problematic has been found in Freeimage up to 1.17.x. Affected is the function FreeImage_CloneTag of the file inFreeImageTag.cpp. The manipulation with an unknown input leads to a null pointer dereference vulnerability. CWE is classifying the issue as CWE-476. A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit. This is going to have an impact on availability. CVE summarizes:

NULL pointer dereference vulnerability in FreeImage before 1.18.0 via the FreeImage_CloneTag function inFreeImageTag.cpp.

The weakness was released 08/23/2023. The advisory is shared for download at sourceforge.net. This vulnerability is traded as CVE-2021-40264 since 08/30/2021. There are known technical details, but no exploit is available.

Upgrading to version 1.18.0 eliminates this vulnerability.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Name

• Freeimage

Version

• 1.0
• 1.1
• 1.2
• 1.3
• 1.4
• 1.5
• 1.6
• 1.7
• 1.8
• 1.9
• 1.10
• 1.11
• 1.12
• 1.13
• 1.14
• 1.15
• 1.16
• 1.17

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion