VDB
GCVE-VVD-MAGEIA-2020-19
GCVE-VVD-MAGEIA-2020-19
Advisory Published
The updated packages fix security vulnerabilities:
When FreeImage 3.18.0 reads a tiff file, it will be handed to the Load
function of the PluginTIFF.cpp file, but a memcpy occurs in which the
destination address and the size of the copied data are not considered,
resulting in a heap overflow. (CVE-2019-12211)
When FreeImage 3.18.0 reads a special TIFF file, the TIFFReadDirectory
function in PluginTIFF.cpp always returns 1, leading to stack exhaustion.
(CVE-2019-12213)
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | nextcloud-client | 0 (affected), 2.6.2-1.mga7 (unaffected) | — |
| Mageia | freeimage | 0 (affected), 3.18.0-2.mga7 (unaffected), 0 (affected), 3.18.0-2.mga7 (unaffected) | — |
References
nextcloud-client maintenance release
advisory
Browse GCVE Records
100 records in the GCVE database · Updated April 16, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.