CVE-2019-12213

When FreeImage 3.18.0 reads a special TIFF file, the TIFFReadDirectory function in PluginTIFF.cpp always returns 1, leading to stack exhaustion...

CVE-2019-12211

When FreeImage 3.18.0 reads a tiff file, it will be handed to the Load function of the PluginTIFF.cpp file, but a memcpy occurs in which the destination address and the size of the copied data are not considered, resulting in a heap overflow...

Stack overflow

When FreeImage 3.18.0 reads a special TIFF file, the TIFFReadDirectory function in PluginTIFF.cpp always returns 1, leading to stack exhaustion...

UBUNTU-CVE-2019-12211

When FreeImage 3.18.0 reads a tiff file, it will be handed to the Load function of the PluginTIFF.cpp file, but a memcpy occurs in which the destination address and the size of the copied data are not considered, resulting in a heap overflow...

CVE-2019-12213

When FreeImage 3.18.0 reads a special TIFF file, the TIFFReadDirectory function in PluginTIFF.cpp always returns 1, leading to stack exhaustion...

CVE-2019-12213

FreeImage library (3.18.0 affected in FreeImage 3.18.0 and earlier) contains TIFF handling flaws in PluginTIFF.cpp that lead to: (1) CVE-2019-12211 — heap overflow during memcpy in Load, enabling possible DoS or other impact; and (2) CVE-2019-12213 — stack exhaustion due to recursion in TIFF proc...

CVE-2019-12213

When FreeImage 3.18.0 reads a special TIFF file, the TIFFReadDirectory function in PluginTIFF.cpp always returns 1, leading to stack exhaustion...

CVE-2019-12213

When FreeImage 3.18.0 reads a special TIFF file, the TIFFReadDirectory function in PluginTIFF.cpp always returns 1, leading to stack exhaustion...

CVE-2019-12213

When FreeImage 3.18.0 reads a special TIFF file, the TIFFReadDirectory function in PluginTIFF.cpp always returns 1, leading to stack exhaustion...

CVE-2019-12211

When FreeImage 3.18.0 reads a tiff file, it will be handed to the Load function of the PluginTIFF.cpp file, but a memcpy occurs in which the destination address and the size of the copied data are not considered, resulting in a heap overflow...

CVE-2019-12211

CVE-2019-12211 affects the FreeImage library (notably up to 3.18.0, with fixes in later package updates) where a memcpy in PluginTIFF.cpp can cause a heap overflow when processing TIFF data. This is a remote-attack surface that could lead to denial of service as described in multiple advisories. ...

CVE-2019-12211

When FreeImage 3.18.0 reads a tiff file, it will be handed to the Load function of the PluginTIFF.cpp file, but a memcpy occurs in which the destination address and the size of the copied data are not considered, resulting in a heap overflow...

imagemagick/encoder_tiff_fuzzer: Use-of-uninitialized-value in HalfToSinglePrecision

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5640152724013056 Project: imagemagick Fuzzer: libFuzzerimagemagickencodertifffuzzer Fuzz target binary: encodertifffuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

FreeImage Resource Management Error Vulnerability

FreeImage is a cross-platform open source library for supporting popular graphic image formats. When FreeImage 3.18.0 reads special TIFF files, the TIFFReadDirectory function in PluginTIFF.cpp always returns 1, causing the stack to run out...

UBUNTU-CVE-2017-12805

In ImageMagick 7.0.6-6, a memory exhaustion vulnerability was found in the function ReadTIFFImage, which allows attackers to cause a denial of service...

Fedora Update for libtiff FEDORA-2019-d7b5e168d1

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora Update for libtiff FEDORA-2018-bd18c784de

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2019-11687

An issue was discovered in the DICOM Part 10 File Format in the NEMA DICOM Standard 1995 through 2019b and continuing in current implementations. The 128-byte preamble of a DICOM file that complies with this specification can contain arbitrary executable headers for multiple operating systems,...

CVE-2019-11597

In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in the function WriteTIFFImage of coders/tiff.c, which allows an attacker to cause a denial of service or possibly information disclosure via a crafted image file...

Heap-Based Buffer Overflow

LibTIFF's TIFF2PDF tool is vulnerable to heap-based buffer overflow attacks. A attacker can exploit this issue to execute arbitrary code via a specifically crafted TIFF file which may leads the application to crash...