When FreeImage 3.18.0 reads a special TIFF file, the TIFFReadDirectory function in PluginTIFF.cpp always returns 1, leading to stack exhaustion.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade freeimage | Jan 19, 2021 | May 20, 2019 |
| Debian | — | Upgrade freeimage | Dec 12, 2019 | May 20, 2019 |
| Gentoo Linux | — | Upgrade media-libs/freeimage. | Jul 5, 2021 | May 20, 2019 |
| Ubuntu | — | Upgrade libfreeimageplus-devUpgrade libfreeimage3 (Ubuntu Pro)Upgrade libfreeimage-devUpgrade libfreeimageplus3Upgrade libfreeimage3Upgrade libfreeimageplus3 (Ubuntu Pro) | Sep 23, 2020 | May 20, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub