Heap Overflow Vulnerability in FreeImage 3.18.0 Caused by TIFF File Processing
CVE-2019-12211

7.5HIGH

Key Information:

Vendor: Freeimage Project
Status: Freeimage
Vendor: CVE Published:; 20 May 2019

🔔 Create Freeimage Project Vulnerability Alert

What is CVE-2019-12211?

A heap overflow vulnerability exists in FreeImage 3.18.0 when processing TIFF files. The issue arises from the Load function in the PluginTIFF.cpp file, where a memcpy operation does not properly account for the destination address or the size of the data being copied. This oversight can lead to memory corruption, potentially allowing an attacker to execute arbitrary code or cause a denial of service. Users are advised to update to the latest version to mitigate risks associated with this vulnerability.