CVE-2023-47997

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-47997

6.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

A

n issue discovered in BitmapAccess.cpp::FreeImage_AllocateBitmap in FreeImage 3.18.0 leads to an infinite loop and allows attackers to cause a denial of service.

References
Link Resource
https://github.com/thelastede/FreeImage-cve-poc/tree/master/CVE-2023-47997 Exploit Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EDK7DSADYUHJFNVSRGJHEFJGMWRGGDLM/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K3ZNVRL5PCTMMA3ZBDKH5WH4RT4ST3HW/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VLDUDJOWZAKBQMQ7XYNJTRCFPOB56BOE/
https://github.com/thelastede/FreeImage-cve-poc/tree/master/CVE-2023-47997 Exploit Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EDK7DSADYUHJFNVSRGJHEFJGMWRGGDLM/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K3ZNVRL5PCTMMA3ZBDKH5WH4RT4ST3HW/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VLDUDJOWZAKBQMQ7XYNJTRCFPOB56BOE/
https://lists.fedoraproject.org/archives/list/[email protected]/message/EDK7DSADYUHJFNVSRGJHEFJGMWRGGDLM/
https://lists.fedoraproject.org/archives/list/[email protected]/message/K3ZNVRL5PCTMMA3ZBDKH5WH4RT4ST3HW/
Configurations

Configuration 1 (hide)

cpe:2.3:a:freeimage_project:freeimage:3.18.0:*:*:*:*:*:*:*
History

04 Nov 2025, 19:16

Type Values Removed Values Added
References
  • () https://lists.fedoraproject.org/archives/list/[email protected]/message/EDK7DSADYUHJFNVSRGJHEFJGMWRGGDLM/ -
  • () https://lists.fedoraproject.org/archives/list/[email protected]/message/K3ZNVRL5PCTMMA3ZBDKH5WH4RT4ST3HW/ -

21 Nov 2024, 08:30

Type Values Removed Values Added
References () https://github.com/thelastede/FreeImage-cve-poc/tree/master/CVE-2023-47997 - Exploit, Third Party Advisory () https://github.com/thelastede/FreeImage-cve-poc/tree/master/CVE-2023-47997 - Exploit, Third Party Advisory
References () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EDK7DSADYUHJFNVSRGJHEFJGMWRGGDLM/ - () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EDK7DSADYUHJFNVSRGJHEFJGMWRGGDLM/ -
References () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K3ZNVRL5PCTMMA3ZBDKH5WH4RT4ST3HW/ - () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K3ZNVRL5PCTMMA3ZBDKH5WH4RT4ST3HW/ -
References () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VLDUDJOWZAKBQMQ7XYNJTRCFPOB56BOE/ - () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VLDUDJOWZAKBQMQ7XYNJTRCFPOB56BOE/ -
Information

Published : 2024-01-10 00:15

Updated : 2025-11-04 19:16

NVD link : CVE-2023-47997

Mitre link : CVE-2023-47997

CVE.ORG link : CVE-2023-47997

JSON object : View

Products Affected

freeimage_project

CWE
CWE-835

Loop with Unreachable Exit Condition ('Infinite Loop')