Vulnetix
Try Vulnetix Request Demo
CVE-2019-12211 PUBLISHED

When FreeImage 3.18.0 reads a tiff file, it will be handed to the Load function of the PluginTIFF.cpp file, but a memcpy occurs in which the destination address and the size of the copied data are not considered, resulting in a heap overflow.

EPSS 1.03% · 77.2th percentile

Risk Scores

EPSS Score
1.03%
77.2th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:14.04:LTSfreeimage3.15.1-2build1, 3.15.1-2build2, 0
Ubuntu:Pro:16.04:LTSfreeimage3.15.4-6, 0, 3.15.4-4.1build1
Ubuntu:20.04:LTSfreeimage0, 3.18.0+ds2-1ubuntu1, 3.18.0+ds2-1ubuntu2
Ubuntu:18.04:LTSfreeimage0, 3.17.0+ds1-5build2

Timeline

References

Open in Interactive Console →