CVE-2019-12214: High severity freeimage vulnerability
In FreeImage 3.18.0, an out-of-bounds access occurs because of mishandling of the OpenJPEG j2kreadppmv3 function in j2k.c. The value of lNppm comes from the file read in, and the code does not consider that lNppm may be greater than the size of pheaderdata.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-12214?
CVE-2019-12214 is a vulnerability in FreeImage 3.18.0 that allows for an out-of-bounds access due to mishandling of the OpenJPEG j2k_read_ppm_v3 function.
What is the severity of CVE-2019-12214?
The severity of CVE-2019-12214 is high, with a severity value of 7.5.
What software is affected by CVE-2019-12214?
FreeImage 3.18.0 is affected by CVE-2019-12214.
How can I fix CVE-2019-12214?
There are no available remedies or fixes mentioned for CVE-2019-12214. It is recommended to update to a patched version of FreeImage if one becomes available.
Where can I find more information about CVE-2019-12214?
More information about CVE-2019-12214 can be found at the following references: [1](https://sourceforge.net/p/freeimage/discussion/36111/thread/e06734bed5/) [2](https://security-tracker.debian.org/tracker/CVE-2019-12214)