VYPR
← All advisories
High severity7.5NVD Advisory· Published May 20, 2019· Updated Jun 17, 2026

CVE-2019-12212

CVE-2019-12212

Description

When FreeImage 3.18.0 reads a special JXR file, the StreamCalcIFDSize function of JXRMeta.c repeatedly calls itself due to improper processing of the file, eventually causing stack exhaustion. An attacker can achieve a remote denial of service attack by sending a specially constructed file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Freeimage Project/Freeimage2 versions
    cpe:2.3:a:freeimage_project:freeimage:3.18.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:freeimage_project:freeimage:3.18.0:*:*:*:*:*:*:*
    • (no CPE)range: =3.18.0
  • FreeImage/FreeImagedescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.