Vulnerability details
CVE-2022-4988
KMX Alien::FreeImage
Alien::FreeImage versions through 1.001 for Perl contains several vulnerable libraries
CVSS 3.1
7.3High
Official description
Alien::FreeImage versions through 1.001 for Perl contains several vulnerable libraries. Alien::FreeImage contains version 3.17.0 of the FreeImage library from 2017, which has known vulnerabilities such as CVE-2015-0852 and CVE-2025-65803. The library embeds other images libraries that also have known vulnerabilities.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 7.3High | 3.1 | CISA ADP / Vulnrichment (CISA-ADP) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| KMX | Alien::FreeImage | v ≤ 1.001 | CVEProject cvelistV5 (CNA) |
References and advisories
6- https://freeimage.sourceforge.io/
- https://metacpan.org/release/KMX/Alien-FreeImage-1.001/source/src/Source
- https://nvd.nist.gov/vuln/detail/CVE-2015-0852 vendor-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-65803 vendor-advisory
- https://github.com/kmx/alien-freeimage/issues/4 issue-tracking
- https://github.com/kmx/alien-freeimage/issues/5 issue-tracking
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2026-05-11
- Last updated
- 2026-05-13
- State
- Published
- Assigner (CNA)
- CPANSec
Exploit prediction (EPSS)
0.29%
Probability of exploitation in 30 days
21.7%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- Yes
- Exploitation
- None
- Technical impact
- Partial
Weaknesses (CWE)
- CWE-1395Dependency on Vulnerable Third-Party Component