{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"freeimage","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:13","exploited":false,"fixed_versions":[],"id":"tcs_01M5NDQRP33T4HAYBCB3REHD01","modified_at":"2026-10-09T17:00:04.589648019Z","published_at":"2019-05-20T16:29:01.240Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2019-12214","https://security-tracker.debian.org/tracker/CVE-2019-12214"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2019-12214#Debian:13/freeimage","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2019-12214"}],"summary":"In FreeImage 3.18.0, an out-of-bounds access occurs because of mishandling of the OpenJPEG j2k_read_ppm_v3 function in j2k.c. The value of l_N_ppm comes from the file read in, and the code does not co"}