CVE-2023-47993: 
Homebrew vulnerability analysis and mitigation

A Buffer out-of-bound read vulnerability was discovered in FreeImage 3.18.0, specifically affecting the Exif.cpp::ReadInt32 function. The vulnerability was disclosed on January 9, 2024, and affects the FreeImage library's image processing capabilities (NVD, CVE).

The vulnerability exists in the Exif.cpp::ReadInt32 function when processing JPEG images through the FreeImage_LoadU function. The issue stems from insufficient bounds checking in the DIR_ENTRY_ADDR macro, which allows controlled input to affect memory address calculations. The vulnerability has been assigned a CVSS v3.1 base score of 6.5 (Medium), with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H (NVD).

When exploited, this vulnerability can lead to a denial-of-service condition. The out-of-bounds read can cause program crashes when accessing unallocated memory, and potentially lead to information leaks if memory addresses are carefully constructed (GitHub POC).

A proof-of-concept exploit has been publicly released demonstrating the vulnerability. The exploit involves crafting specific JPEG images that can trigger the buffer out-of-bounds read condition (GitHub POC).

As of January 2024, no official patch has been released for this vulnerability. Multiple Linux distributions including Ubuntu and Debian have marked this vulnerability as 'fix deferred' pending an upstream fix (Ubuntu, Debian).