Fedora 30 : freeimage / mingw-freeimage (2019-76f546b7b8)

Backport fixes for CVE-2019-12211 and 2019-12213 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C...

Fedora 31 : freeimage / mingw-freeimage (2019-655994894e)

Backport fixes for CVE-2019-12211 and 2019-12213 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C...

[SECURITY] Fedora 30 Update: mingw-freeimage-3.18.0-7.fc30

MinGW Windows freeimage library...

[SECURITY] Fedora 30 Update: freeimage-3.18.0-6.fc30

FreeImage is a library for developers who would like to support popular graphics image formats like PNG, BMP, JPEG, TIFF and others as needed by today's multimedia applications...

freeimage:load_from_memory_fuzzer: Heap-buffer-overflow in _MemoryReadProc

Detailed Report: https://oss-fuzz.com/testcase?key=5639796861173760 Project: freeimage Fuzzing Engine: afl Fuzz Target: loadfrommemoryfuzzer Job Type: aflasanfreeimage Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 11 Crash Address: 0x7f1e0c9be900 Crash State: MemoryReadProc...

freeimage:load_from_memory_fuzzer: Stack-buffer-overflow in strncpy

Detailed Report: https://oss-fuzz.com/testcase?key=5633780185825280 Project: freeimage Fuzzing Engine: libFuzzer Fuzz Target: loadfrommemoryfuzzer Job Type: libfuzzerasanfreeimage Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address: 0x7f89f7151530 Crash State: strncpy...

freeimage:load_from_memory_fuzzer: Stack-buffer-overflow in strncpy

Detailed Report: https://oss-fuzz.com/testcase?key=5131488567230464 Project: freeimage Fuzzing Engine: libFuzzer Fuzz Target: loadfrommemoryfuzzer Job Type: libfuzzerasanfreeimage Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address: 0x7f152a437530 Crash State: strncpy...

freeimage:load_from_memory_fuzzer: Stack-buffer-overflow in strncpy

Detailed report: https://oss-fuzz.com/testcase?key=5161928611069952 Project: freeimage Fuzzing engine: libFuzzer Fuzz target: loadfrommemoryfuzzer Job Type: libfuzzerasanfreeimage Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address: 0x7f6e95821530 Crash State: strncpy...

freeimage/load_from_memory_fuzzer: Stack-buffer-overflow in LibRaw::parse_rollei

Detailed report: https://oss-fuzz.com/testcase?key=5156329342107648 Project: freeimage Fuzzer: libFuzzerloadfrommemoryfuzzer Fuzz target binary: loadfrommemoryfuzzer Job Type: libfuzzerasanfreeimage Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address: 0x7fef5bbbdca0 Crash Stat...

freeimage/load_from_memory_fuzzer: Global-buffer-overflow in LibRaw::parse_makernote

Detailed report: https://oss-fuzz.com/testcase?key=5116280533680128 Project: freeimage Fuzzer: libFuzzerfreeimageloadfrommemoryfuzzer Fuzz target binary: loadfrommemoryfuzzer Job Type: libfuzzerasanfreeimage Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x000000f331f...

freeimage/load_from_memory_fuzzer: Heap-buffer-overflow in LoadPixelDataRLE4

Detailed report: https://oss-fuzz.com/testcase?key=5116007367049216 Project: freeimage Fuzzer: aflloadfrommemoryfuzzer Fuzz target binary: loadfrommemoryfuzzer Job Type: aflasanfreeimage Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x7f0ea94779b0 Crash State:...

freeimage/load_from_memory_fuzzer: Heap-buffer-overflow in _MemoryReadProc

Detailed report: https://oss-fuzz.com/testcase?key=5088386304442368 Project: freeimage Fuzzer: aflfreeimageloadfrommemoryfuzzer Fuzz target binary: loadfrommemoryfuzzer Job Type: aflasanfreeimage Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 6 Crash Address: 0x6140000001f8 Crash State...

CVE-2019-12211

When FreeImage 3.18.0 reads a tiff file, it will be handed to the Load function of the PluginTIFF.cpp file, but a memcpy occurs in which the destination address and the size of the copied data are not considered, resulting in a heap overflow...

DEBIAN-CVE-2019-12213

When FreeImage 3.18.0 reads a special TIFF file, the TIFFReadDirectory function in PluginTIFF.cpp always returns 1, leading to stack exhaustion...

CVE-2019-12212

When FreeImage 3.18.0 reads a special JXR file, the StreamCalcIFDSize function of JXRMeta.c repeatedly calls itself due to improper processing of the file, eventually causing stack exhaustion. An attacker can achieve a remote denial of service attack by sending a specially constructed file...

DEBIAN-CVE-2019-12214

In FreeImage 3.18.0, an out-of-bounds access occurs because of mishandling of the OpenJPEG j2kreadppmv3 function in j2k.c. The value of lNppm comes from the file read in, and the code does not consider that lNppm may be greater than the size of pheaderdata...

CVE-2019-12213

When FreeImage 3.18.0 reads a special TIFF file, the TIFFReadDirectory function in PluginTIFF.cpp always returns 1, leading to stack exhaustion...

CVE-2019-12211

When FreeImage 3.18.0 reads a tiff file, it will be handed to the Load function of the PluginTIFF.cpp file, but a memcpy occurs in which the destination address and the size of the copied data are not considered, resulting in a heap overflow...

CVE-2019-12212

When FreeImage 3.18.0 reads a special JXR file, the StreamCalcIFDSize function of JXRMeta.c repeatedly calls itself due to improper processing of the file, eventually causing stack exhaustion. An attacker can achieve a remote denial of service attack by sending a specially constructed file...

CVE-2019-12214

In FreeImage 3.18.0, an out-of-bounds access occurs because of mishandling of the OpenJPEG j2kreadppmv3 function in j2k.c. The value of lNppm comes from the file read in, and the code does not consider that lNppm may be greater than the size of pheaderdata...