The FreeImage Project maintains a widely embedded image-processing library that, despite a narrow product footprint, sits deep in the software supply chain across graphics applications, scientific tools, and media software. Vulnerabilities concentrate in the core FreeImage library itself and recur through classic memory-safety weakness classes: buffer overflows (both stack and heap), out-of-bounds reads and writes, and integer-overflow conditions that arise from parsing and decoding untrusted image formats across dozens of supported codecs. These weakness classes are characteristic of C/C++ image parsers handling diverse, often malformed input, and they present a meaningful attack surface when the library is embedded in internet-facing or user-facing applications. Defenders should inventory downstream products that bundle FreeImage rather than tracking the library alone, since many deployments do not receive timely updates; live severity and exploitation status are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Freeimage Project over time
Signals from CVEs in this vendor scope (53 CVEs).
53 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2025-70968CRITICAL FreeImage 3.18.0 contains a Use After Free in PluginTARGA.cpp;loadRLE(). | Jan 14, 2026 | 9.8 | 35 | NO | NO |
CVE-2024-31570CRITICAL libfreeimage in FreeImage 3.4.0 through 3.18.0 has a stack-based buffer overflow in the PluginXPM.cpp Load function via an XPM file. | Sep 19, 2024 | 9.8 | 27 | NO | NO |
CVE-2019-12211HIGH When FreeImage 3.18.0 reads a tiff file, it will be handed to the Load function of the PluginTIFF.cpp file, but a memcpy occurs in which the destination address and the size of the | May 20, 2019 | 7.5 | 26 | NO | NO |
CVE-2016-5684HIGH An exploitable out-of-bounds write vulnerability exists in the XMP image handling functionality of the FreeImage library. A specially crafted XMP file can cause an arbitrary memory | Jan 6, 2017 | 7.8 | 26 | NO | NO |
CVE-2019-12214HIGH In FreeImage 3.18.0, an out-of-bounds access occurs because of mishandling of the OpenJPEG j2k_read_ppm_v3 function in j2k.c. The value of l_N_ppm comes from the file read in, and | May 20, 2019 | 7.5 | 25 | NO | NO |
CVE-2019-12212HIGH When FreeImage 3.18.0 reads a special JXR file, the StreamCalcIFDSize function of JXRMeta.c repeatedly calls itself due to improper processing of the file, eventually causing stack | May 20, 2019 | 7.5 | 25 | NO | NO |
CVE-2024-28578HIGH Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the Load() function when reading images in RAS format. | Mar 20, 2024 | 8.4 | 24 | NO | NO |
CVE-2024-28580HIGH Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the ReadData() function when reading images in RAS for | Mar 20, 2024 | 8.4 | 23 | NO | NO |
CVE-2023-47994HIGH An integer overflow vulnerability in LoadPixelDataRLE4 function in PluginBMP.cpp in Freeimage 3.18.0 allows attackers to obtain sensitive information, cause a denial of service and | Jan 9, 2024 | 8.8 | 23 | NO | NO |
CVE-2023-47992HIGH An integer overflow vulnerability in FreeImageIO.cpp::_MemoryReadProc in FreeImage 3.18.0 allows attackers to obtain sensitive information, cause a denial-of-service attacks and/or | Jan 9, 2024 | 8.8 | 23 | NO | NO |
Signals from CVEs in this vendor scope (53 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Freeimage Project.
Media articles that mention a CVE ID that affects a product developed by Freeimage Project — matched by CVE ID, not by vendor name.