Multiple existing vulnerabilities

[shameekganguly]

NIST has recently listed multiple existing vulnerabilities for FreeImage:
CVE-2020-22524
CVE-2020-24294
CVE-2024-28579
CVE-2024-28566
CVE-2024-28578
CVE-2024-28562
CVE-2024-28571
CVE-2024-28575
CVE-2024-28583
CVE-2024-28580
CVE-2024-28563
CVE-2024-28581
CVE-2024-28584
CVE-2024-28564
CVE-2024-28567
CVE-2024-28577
CVE-2024-28565
CVE-2024-28582
CVE-2024-9029
CVE-2024-28572
CVE-2024-28568
CVE-2024-28574
CVE-2024-28569
CVE-2024-28573
CVE-2024-28576
CVE-2024-28570

Filing this ticket as a tracker to mitigate these vulnerabilities.

[danoli3]

Many of these are patched as part of this repo. Head at origin SVN still vulnerable

…

On Tue, 23 Sep 2025 at 3:45 am, Shameek Ganguly ***@***.***> wrote: *shameekganguly* created an issue (danoli3/FreeImage#35) <#35> NIST has recently listed multiple existing vulnerabilities for FreeImage: CVE-2020-22524 <https://nvd.nist.gov/vuln/detail/CVE-2020-22524> CVE-2020-24294 <https://nvd.nist.gov/vuln/detail/CVE-2020-24294> CVE-2024-28579 <https://nvd.nist.gov/vuln/detail/CVE-2024-28579> CVE-2024-28566 <https://nvd.nist.gov/vuln/detail/CVE-2024-28566> CVE-2024-28578 <https://nvd.nist.gov/vuln/detail/CVE-2024-28578> CVE-2024-28562 <https://nvd.nist.gov/vuln/detail/CVE-2024-28562> CVE-2024-28571 <https://nvd.nist.gov/vuln/detail/CVE-2024-28571> CVE-2024-28575 <https://nvd.nist.gov/vuln/detail/CVE-2024-28575> CVE-2024-28583 <https://nvd.nist.gov/vuln/detail/CVE-2024-28583> CVE-2024-28580 <https://nvd.nist.gov/vuln/detail/CVE-2024-28580> CVE-2024-28563 <https://nvd.nist.gov/vuln/detail/CVE-2024-28563> CVE-2024-28581 <https://nvd.nist.gov/vuln/detail/CVE-2024-28581> CVE-2024-28584 <https://nvd.nist.gov/vuln/detail/CVE-2024-28584> CVE-2024-28564 <https://nvd.nist.gov/vuln/detail/CVE-2024-28564> CVE-2024-28567 <https://nvd.nist.gov/vuln/detail/CVE-2024-28567> CVE-2024-28577 <https://nvd.nist.gov/vuln/detail/CVE-2024-28577> CVE-2024-28565 <https://nvd.nist.gov/vuln/detail/CVE-2024-28565> CVE-2024-28582 <https://nvd.nist.gov/vuln/detail/CVE-2024-28582> CVE-2024-9029 <https://nvd.nist.gov/vuln/detail/CVE-2024-9029> CVE-2024-28572 <https://nvd.nist.gov/vuln/detail/CVE-2024-28572> CVE-2024-28568 <https://nvd.nist.gov/vuln/detail/CVE-2024-28568> CVE-2024-28574 <https://nvd.nist.gov/vuln/detail/CVE-2024-28574> CVE-2024-28569 <https://nvd.nist.gov/vuln/detail/CVE-2024-28569> CVE-2024-28573 <https://nvd.nist.gov/vuln/detail/CVE-2024-28573> CVE-2024-28576 <https://nvd.nist.gov/vuln/detail/CVE-2024-28576> CVE-2024-28570 <https://nvd.nist.gov/vuln/detail/CVE-2024-28570> Filing this ticket as a tracker to mitigate these vulnerabilities. — Reply to this email directly, view it on GitHub <#35>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAGK2HEM2A35RBTV5FHL6AT3UAYTJAVCNFSM6AAAAACHGBBGIKVHI2DSMVQWIX3LMV43ASLTON2WKOZTGQ2DEMBUGQYTIOI> . You are receiving this because you are subscribed to this thread.Message ID: ***@***.***>

[shameekganguly]

Thanks danoli3, would you happen to have a list of which vulnerabilities are patched in this repo? It would be good to list that in the repo README

[danoli3]

Yes that’s a good idea. Many of these NVIDIA have patched so big ups to Nvidia.

…

On Wed, 24 Sep 2025 at 7:19 am, Shameek Ganguly ***@***.***> wrote: *shameekganguly* left a comment (danoli3/FreeImage#35) <#35 (comment)> Thanks danoli3, would you happen to have a list of which vulnerabilities are patched in this repo? It would be good to list that in the repo README — Reply to this email directly, view it on GitHub <#35 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAGK2HAQUW62QSRZ7WEBJVT3UG2M3AVCNFSM6AAAAACHGBBGIKVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZTGMRVGU4DSMBSG4> . You are receiving this because you commented.Message ID: ***@***.***>