CVE-2024-28567

What it actually does

Buffer overflow in FreeImage_CreateICCProfile() when parsing TIFF images causes denial of service.

Why it matters to the business

Local attackers can crash image-processing applications, interrupting workflows that depend on the library with no remote or data-theft risk.

How an attack unfolds

An attacker supplies a crafted TIFF file to any local application that calls the vulnerable FreeImage function; the overflow is triggered during ICC profile creation, resulting in an immediate crash.

How to fix it

Upgrade libnetfilter_queue and libnetfilter_queue-devel on AlmaLinux 8 to version 1.0.4-3.el8 or later; rebuild or replace any applications statically linking the vulnerable FreeImage 3.19.0 library.

How to confirm the fix worked

Confirm package versions match the fixed releases, run regression tests that exercise TIFF loading with ICC profiles, and verify no crashes occur under the same input that previously triggered the overflow.

Typical attack path

1. Prepare malicious TIFF image targeting FreeImage_CreateICCProfile()
2. Cause a local application to load the image
3. Trigger buffer overflow and application crash

How to detect it

Monitor application and system logs for unexpected crashes during TIFF image processing; correlate with process core dumps or segfaults involving image library calls.

What your security team should do

• Apply the listed package updates on all AlmaLinux 8 systems immediately
• Scan for and rebuild any software that bundles FreeImage 3.19.0
• Add TIFF image handling to crash-monitoring and fuzzing pipelines