Debian Freeimage vulnerabilities

CVE-2019-12211 [HIGH] CVE-2019-12211: freeimage - When FreeImage 3.18.0 reads a tiff file, it will be handed to the Load function ... When FreeImage 3.18.0 reads a tiff file, it will be handed to the Load function of the PluginTIFF.cpp file, but a memcpy occurs in which the destination address and the size of the copied data are not considered, resulting in a heap overflow. Scope: local bookworm: resolved (fixed in 3.18.0+ds2-3) bullseye: resolved (fixed in 3.18.0+ds2-3) forky: resolved (fixed i

CVE-2016-5684 [HIGH] CVE-2016-5684: freeimage - An exploitable out-of-bounds write vulnerability exists in the XMP image handlin... An exploitable out-of-bounds write vulnerability exists in the XMP image handling functionality of the FreeImage library. A specially crafted XMP file can cause an arbitrary memory overwrite resulting in code execution. An attacker can provide a malicious image to trigger this vulnerability. Scope: local bookworm: resolved (fixed in 3.17.0+ds1-3) bullseye: resolved

CVE-2020-21427 [HIGH] CVE-2020-21427: freeimage - Buffer Overflow vulnerability in function LoadPixelDataRLE8 in PluginBMP.cpp in ... Buffer Overflow vulnerability in function LoadPixelDataRLE8 in PluginBMP.cpp in FreeImage 3.18.0 allows remote attackers to run arbitrary code and cause other impacts via crafted image file. Scope: local bookworm: resolved (fixed in 3.18.0+ds2-9+deb12u1) bullseye: resolved (fixed in 3.18.0+ds2-6+deb11u1) forky: resolved (fixed in 3.18.0+ds2-10) sid: resolved (fixe

CVE-2020-21428 [HIGH] CVE-2020-21428: freeimage - Buffer Overflow vulnerability in function LoadRGB in PluginDDS.cpp in FreeImage ... Buffer Overflow vulnerability in function LoadRGB in PluginDDS.cpp in FreeImage 3.18.0 allows remote attackers to run arbitrary code and cause other impacts via crafted image file. Scope: local bookworm: resolved (fixed in 3.18.0+ds2-9+deb12u1) bullseye: resolved (fixed in 3.18.0+ds2-6+deb11u1) forky: resolved (fixed in 3.18.0+ds2-10) sid: resolved (fixed in 3.18.

CVE-2019-12213 [MEDIUM] CVE-2019-12213: freeimage - When FreeImage 3.18.0 reads a special TIFF file, the TIFFReadDirectory function ... When FreeImage 3.18.0 reads a special TIFF file, the TIFFReadDirectory function in PluginTIFF.cpp always returns 1, leading to stack exhaustion. Scope: local bookworm: resolved (fixed in 3.18.0+ds2-3) bullseye: resolved (fixed in 3.18.0+ds2-3) forky: resolved (fixed in 3.18.0+ds2-3) sid: resolved (fixed in 3.18.0+ds2-3) trixie: resolved (fixed in 3.18.0+ds2-3)

CVE-2020-22524 [MEDIUM] CVE-2020-22524: freeimage - Buffer Overflow vulnerability in FreeImage_Load function in FreeImage Library 3.... Buffer Overflow vulnerability in FreeImage_Load function in FreeImage Library 3.19.0(r1828) allows attackers to cuase a denial of service via crafted PFM file. Scope: local bookworm: resolved (fixed in 3.18.0+ds2-9+deb12u1) bullseye: resolved (fixed in 3.18.0+ds2-6+deb11u1) forky: resolved (fixed in 3.18.0+ds2-10) sid: resolved (fixed in 3.18.0+ds2-10) trixie: r

CVE-2015-0852 [MEDIUM] CVE-2015-0852: freeimage - Multiple integer underflows in PluginPCX.cpp in FreeImage 3.17.0 and earlier all... Multiple integer underflows in PluginPCX.cpp in FreeImage 3.17.0 and earlier allow remote attackers to cause a denial of service (heap memory corruption) via vectors related to the height and width of a window. Scope: local bookworm: resolved (fixed in 3.15.4-5) bullseye: resolved (fixed in 3.15.4-5) forky: resolved (fixed in 3.15.4-5) sid: resolved (fixed in 3.15

CVE-2015-3885 [MEDIUM] CVE-2015-3885: darktable - Integer overflow in the ljpeg_start function in dcraw 7.00 and earlier allows re... Integer overflow in the ljpeg_start function in dcraw 7.00 and earlier allows remote attackers to cause a denial of service (crash) via a crafted image, which triggers a buffer overflow, related to the len variable. Scope: local bookworm: resolved (fixed in 1.6.7-1) bullseye: resolved (fixed in 1.6.7-1) forky: resolved (fixed in 1.6.7-1) sid: resolved (fixed in 1.