freeimage:load_from_memory_fuzzer: Heap-buffer-overflow in _MemoryReadProc

Detailed Report: https://oss-fuzz.com/testcase?key=6119544348344320 Project: freeimage Fuzzing Engine: afl Fuzz Target: loadfrommemoryfuzzer Job Type: aflasanfreeimage Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x606000000000 Crash State: MemoryReadProc LoadPixelData...

freeimage:load_from_memory_fuzzer: Stack-buffer-overflow in __libcpp_strchr

Detailed Report: https://oss-fuzz.com/testcase?key=6357422487764992 Project: freeimage Fuzzing Engine: libFuzzer Fuzz Target: loadfrommemoryfuzzer Job Type: libfuzzerasanfreeimage Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address: 0x7f9c0b426aa0 Crash State: libcppstrchr...

freeimage:load_from_memory_fuzzer: Index-out-of-bounds in LibRaw::parse_tiff_ifd

Detailed Report: https://oss-fuzz.com/testcase?key=5499341578174464 Project: freeimage Fuzzing Engine: libFuzzer Fuzz Target: loadfrommemoryfuzzer Job Type: libfuzzerubsanfreeimage Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: LibRaw::parsetiffifd...

freeimage:load_from_memory_fuzzer: Crash in _MemoryReadProc

Detailed Report: https://oss-fuzz.com/testcase?key=5003343987605504 Project: freeimage Fuzzing Engine: libFuzzer Fuzz Target: loadfrommemoryfuzzer Job Type: libfuzzerasanfreeimage Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x605f85000ec2 Crash State: MemoryReadProc...

freeimage:load_from_memory_fuzzer: Stack-buffer-overflow in __libcpp_strchr

Detailed Report: https://oss-fuzz.com/testcase?key=5423237502730240 Project: freeimage Fuzzing Engine: libFuzzer Fuzz Target: loadfrommemoryfuzzer Job Type: libfuzzerasanfreeimage Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address: 0x7f192fe3dca0 Crash State: libcppstrchr...

Ubuntu: Security Advisory (USN-4529-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-4529-1: FreeImage vulnerabilities

It was discovered that FreeImage incorrectly handled certain memory operations. If a user were tricked into opening a crafted TIFF file, a remote attacker could use this issue to cause a heap buffer overflow, resulting in a denial of service attack. CVE-2019-12211 It was discovered that FreeImage...

USN-4529-1 freeimage vulnerabilities

It was discovered that FreeImage incorrectly handled certain memory operations. If a user were tricked into opening a crafted TIFF file, a remote attacker could use this issue to cause a heap buffer overflow, resulting in a denial of service attack. CVE-2019-12211 It was discovered that FreeImage...

Ubuntu 18.04 LTS : FreeImage vulnerabilities (USN-4529-1)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4529-1 advisory. It was discovered that FreeImage incorrectly handled certain memory operations. If a user were tricked into opening a crafted TIFF file, a remote attacke...

freeimage:load_from_memory_fuzzer: Stack-buffer-overflow in __libcpp_strchr

Detailed Report: https://oss-fuzz.com/testcase?key=5736051093274624 Project: freeimage Fuzzing Engine: libFuzzer Fuzz Target: loadfrommemoryfuzzer Job Type: libfuzzerasanfreeimage Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address: 0x7ffd87930840 Crash State: libcppstrchr...

FreeImage JPEG File Parsing Heap Overflow Vulnerability

FreeImage is a free , open source , cross-platform Windows, Linux and Mac OS X , supports more than 20 types of images such as BMP, JPEG, GIF, PNG, TIFF , etc. image processing library . A heap overflow vulnerability exists in the FreeImage image parsing library when parsing JPEG files. An attack...

Code execution vulnerability in FreeImage TGA file parsing

FreeImage is a free , open source , cross-platform Windows, Linux and Mac OS X , supports more than 20 types of images such as BMP, JPEG, GIF, PNG, TIFF , etc. image processing library . A code execution vulnerability exists in the FreeImage image parsing library when loading TGA files. An attack...

Heap Overflow Vulnerability in FreeImage BMP File Parsing

FreeImage is a free , open source , cross-platform Windows, Linux and Mac OS X , supports more than 20 types of images such as BMP, JPEG, GIF, PNG, TIFF , etc. image processing library . A heap overflow vulnerability exists in the FreeImage image parsing library when parsing BMP files. An attacke...

Denial of Service Vulnerability in FreeImage JPEG File Parsing

FreeImage is a free , open source , cross-platform Windows, Linux and Mac OS X , supports more than 20 types of images such as BMP, JPEG, GIF, PNG, TIFF , etc. image processing library . A denial of service vulnerability exists in the FreeImage image parsing library when parsing JPEG files. An...

Heap Overflow Vulnerability in FreeImage TIFF Files

FreeImage is a free , open source , cross-platform Windows, Linux and Mac OS X , supports more than 20 types of images such as BMP, JPEG, GIF, PNG, TIFF , etc. image processing library . A heap overflow vulnerability exists in the FreeImage image parsing library when parsing TIFF files. An attack...

Denial of Service Vulnerability in FreeImage TIFF Files

FreeImage is a free , open source , cross-platform Windows, Linux and Mac OS X , supports more than 20 types of images such as BMP, JPEG, GIF, PNG, TIFF , etc. image processing library . A denial of service vulnerability exists in the FreeImage image parsing library when parsing meta information ...

Heap Overflow Vulnerability in FreeImage TGA File Parsing

FreeImage is a free , open source , cross-platform Windows, Linux and Mac OS X , supports more than 20 types of images such as BMP, JPEG, GIF, PNG, TIFF , etc. image processing library . The FreeImage image parsing library suffers from a heap overflow vulnerability when parsing TGA files. An...

Fedora Update for freeimage FEDORA-2019-655994894e

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora Update for mingw-freeimage FEDORA-2019-655994894e

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

MGASA-2020-0019 Updated freeimage packages fix security vulnerabilities

The updated packages fix security vulnerabilities: When FreeImage 3.18.0 reads a tiff file, it will be handed to the Load function of the PluginTIFF.cpp file, but a memcpy occurs in which the destination address and the size of the copied data are not considered, resulting in a heap overflow...