CVE-2024-28572

What it actually does

Buffer overflow in FreeImage_SetTagValue during JPEG tag value handling allows a local attacker to trigger memory corruption resulting in denial of service.

Why it matters to the business

Successful exploitation can interrupt availability of services that rely on the vulnerable image library for processing, leading to unplanned downtime without data loss or remote code execution.

How an attack unfolds

An attacker with local access crafts a malformed JPEG image that triggers the overflow when FreeImage_SetTagValue processes its tags; the resulting crash produces a denial-of-service condition on the affected process.

How to fix it

Upgrade the affected package to the fixed version memcached (AlmaLinux:8): 1.5.22-2.el8 or later; rebuild or redeploy any dependent components that statically link the vulnerable FreeImage library.

How to confirm the fix worked

Confirm the installed package version meets or exceeds the fixed release, then re-test JPEG ingestion paths with both benign and boundary-case images to verify the crash is no longer reproducible.

Typical attack path

1. Locate an application or service that invokes FreeImage to read JPEG files
2. Prepare a JPEG with oversized or malformed tag data designed to overflow the buffer
3. Cause the target process to load and parse the malicious image
4. Trigger the crash and resulting denial of service

How to detect it

Inspect application and system logs for segmentation faults or abrupt terminations during JPEG decoding; correlate with processes that call FreeImage functions.

What your security team should do

• Apply the listed package update across all affected systems within the next maintenance window
• Review image-processing code paths for unnecessary local file handling by untrusted users
• Add runtime monitoring for unexpected process terminations during image operations