[Urgent security issue] FreeImage arbitrary code execution vulnerability about monogame HOT 2 OPEN

FreeImage out of maintance for a while.
It is not clear how to fix all of them beeng out of maintance.
Probably only one alive solution is https://github.com/WinMerge/freeimage

from monogame.

Nothing alarming in my book and there is no action to take from developers using MonoGame. Games made with MonoGame are not exposed (because freeimage is not used by games themselves).

It should be easy to replace freeimage with StbImageSharp, which MonoGame already uses in other places. That would be a native dependency that we don't need anymore, which is always good.

Note that freeimage is only used by the content pipeline when importing image files (i.e. building XNBs). It is never used at runtime (and does not ship with games) and therefore games made with MonoGame are unbothered by this vulnerability (unless someone explicitly embed the content pipeline into a game, which is very unlikely).

TL;DR; it is very unlikely that this vulnerability can be exploited with MonoGame and if it does it would affect only developers, not players. It's easy to replace freeimage entirely, though.

from monogame.