CVE-2024-28573: 
Homebrew vulnerability analysis and mitigation

CVE-2024-28573 is a Buffer Overflow vulnerability discovered in FreeImage version 3.19.0 [r1909]. The vulnerability affects the jpeg_read_exif_profile() function when processing images in JPEG format. This security flaw was disclosed on March 20, 2024, and allows local attackers to cause a denial of service (DoS) via specially crafted input (NVD).

The vulnerability is classified as a Stack-based Buffer Overflow (CWE-121) that occurs within the jpeg_read_exif_profile() function when processing JPEG format images. The CVSS v3.1 base score is 6.2 (Medium), with the vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, indicating local access is required with no privileges needed (NVD).

The primary impact of this vulnerability is the potential for denial of service (DoS) attacks. When successfully exploited, an attacker can cause the application to crash or become unresponsive, affecting the availability of systems using the FreeImage library (NVD).

The vulnerability requires local access to exploit, with no privileges needed and no user interaction required. The attack complexity is considered low, making it relatively straightforward to exploit once an attacker has local access to the target system (NVD).

Currently, there are no official fixes available for this vulnerability. Multiple versions of the FreeImage package in various distributions, including Debian bullseye, bookworm, and sid, remain vulnerable to this issue (Debian-Tracker).