USN-4529-1: freeimage Ubuntu
Vulnerability summary
USN-4529-1 is a vulnerability in freeimage Ubuntu with no CVSS score yet.
Advisory lineage
Upstream 2 · Downstream 0 · Related 2Timeline
- 22-09-2020PublishedVulnerability first disclosed.
- 22-04-2026Last modifiedVulnerability information updated.
Description
freeimage vulnerabilities It was discovered that FreeImage incorrectly handled certain memory operations. If a user were tricked into opening a crafted TIFF file, a remote attacker could use this issue to cause a heap buffer overflow, resulting in a denial of service attack. (CVE-2019-12211) It was discovered that FreeImage incorrectly processed images under certain circumstances. If a user were tricked into opening a crafted TIFF file, a remote attacker could possibly use this issue to cause a stack exhaustion condition, resulting in a denial of service attack. (CVE-2019-12213)
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Ubuntu1 product
- freeimage< 3.17.0+ds1-5+deb9u1build0.18.04.1
1 vendor · 1 product