← Back

CVE-2025-65803

nvd nist
Published: Dec 10, 2025Modified: Dec 17, 2025

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Exploitability: 2.8 / Impact: 3.6
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

An integer overflow in the psdParser::ReadImageData function of FreeImage v3.18.0 and before allows attackers to cause a Denial of Service (DoS) via supplying a crafted PSD file.

Affected (1)

Freeimage Project
1 product
Freeimage
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Freeimage
Up to 3.18.0

Related CWEs

CWE-190
Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

References (2)

Source: cve@mitre.org
Product
Source: cve@mitre.org
ExploitIssue TrackingThird Party Advisory

Timeline

No history available yet.