CVE-2019-12213
When FreeImage 3.18.0 reads a special TIFF file, the TIFFReadDirectory function in PluginTIFF.cpp always returns 1, leading to stack exhaustion.
- Update to 3.17.0+ds1-5+deb9u1build0.18.04.1
Published Updated
PatchFirst · Latest vulnerabilities
freeimage vulnerabilities
Vulnerabilities published for freeimage in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 2
CVE-2019-12211
When FreeImage 3.18.0 reads a tiff file, it will be handed to the Load function of the PluginTIFF.cpp file, but a memcpy occurs in which the destination address and the size of the copied data are not considered, resulting in a heap overflow.
- Update to 3.17.0+ds1-5+deb9u1build0.18.04.1
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.