Log in Start free

Vulnerability · Published Jan 9, 2024 · Assigned by mitre

CVE-2023-47995

Medium 6.5

In plain English

A medium-severity buffer overflow in the freeimage package (Debian). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 54% of all known vulnerabilities).

Severity (CVSS 3.1)6.5Medium
Exploit odds (30 days)0.7%top 45.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Memory Allocation with Excessive Size Value discovered in BitmapAccess.cpp::FreeImage_AllocateBitmap in FreeImage 3.18.0 allows attackers to cause a denial of service.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12freeimageno fix listedDEBIAN-CVE-2023-47995
Debian:13freeimageno fix listedDEBIAN-CVE-2023-47995
Ubuntu:22.04:LTSfreeimageno fix listedUBUNTU-CVE-2023-47995
Ubuntu:24.04:LTSfreeimageno fix listedUBUNTU-CVE-2023-47995
Ubuntu:25.10freeimageno fix listedUBUNTU-CVE-2023-47995
Ubuntu:26.04:LTSfreeimageno fix listedUBUNTU-CVE-2023-47995
Ubuntu:26.10freeimageno fix listedUBUNTU-CVE-2023-47995

Affected products (as reported)

VendorProductVersions
n/a n/a n/a

Weakness: CWE-120 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

References