Alpine/freeimage: high 7.5
When FreeImage 3.18.0 reads a tiff file, it will be handed to the Load function of the PluginTIFF.cpp file, but a memcpy occurs in which the destination address and the size of the copied data are not
Action: Upgrade freeimage to 3.18.0-r2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.18.0-r2 | - |
Fixed versions
| 3.18.0-r2 |
Sources
- osv: ALPINE-CVE-2019-12211#Alpine:v3.24/freeimage
- https://security.alpinelinux.org/vuln/CVE-2019-12211
published · modified · JSON