Vulnerabilities > Freeimage Project > Freeimage > High

DATE CVE VULNERABILITY TITLE RISK
2019-05-20 CVE-2019-12214 Out-of-bounds Read vulnerability in Freeimage Project Freeimage 3.18.0
In FreeImage 3.18.0, an out-of-bounds access occurs because of mishandling of the OpenJPEG j2k_read_ppm_v3 function in j2k.c.
network
low complexity
freeimage-project CWE-125
7.5
2019-05-20 CVE-2019-12212 Uncontrolled Recursion vulnerability in Freeimage Project Freeimage 3.18.0
When FreeImage 3.18.0 reads a special JXR file, the StreamCalcIFDSize function of JXRMeta.c repeatedly calls itself due to improper processing of the file, eventually causing stack exhaustion.
network
low complexity
freeimage-project CWE-674
7.5
2019-05-20 CVE-2019-12211 Out-of-bounds Write vulnerability in multiple products
When FreeImage 3.18.0 reads a tiff file, it will be handed to the Load function of the PluginTIFF.cpp file, but a memcpy occurs in which the destination address and the size of the copied data are not considered, resulting in a heap overflow.
network
low complexity
freeimage-project canonical CWE-787
7.5
2017-01-06 CVE-2016-5684 Out-of-bounds Write vulnerability in Freeimage Project Freeimage 3.17.0
An exploitable out-of-bounds write vulnerability exists in the XMP image handling functionality of the FreeImage library.
local
low complexity
freeimage-project CWE-787
7.8