Stack Exhaustion Vulnerability in FreeImage by FreeImage Developers
CVE-2019-12213

6.5MEDIUM

Key Information:

Vendor: Freeimage Project
Status: Freeimage
Vendor: CVE Published:; 20 May 2019

🔔 Create Freeimage Project Vulnerability Alert

What is CVE-2019-12213?

FreeImage 3.18.0 contains a vulnerability that occurs when the TIFFReadDirectory function in PluginTIFF.cpp processes a specially crafted TIFF file. This function always returns 1, which can lead to stack exhaustion. This flaw can potentially be exploited by attackers to cause a denial-of-service condition, impacting the performance and availability of applications relying on FreeImage for image processing. It is essential for users and administrators of FreeImage to apply updates or follow security advisories to mitigate the risks associated with this vulnerability.