| ID | 
        
          CVE-2019-12214
         | 
      
      
          | Sažetak | 
        In FreeImage 3.18.0, an out-of-bounds access occurs because of mishandling of the OpenJPEG j2k_read_ppm_v3 function in j2k.c. The value of l_N_ppm comes from the file read in, and the code does not consider that l_N_ppm may be greater than the size of p_header_data. | 
      
      
          | Reference | 
        
          
         | 
      
      
        | CVSS | 
        
          
              | Base:           | 5.0 |  
              | Impact:         | 2.9 |  
              | Exploitability: | 10.0 |  
           
         | 
      
    
        | Pristup | 
        
        
            | Vektor | Složenost | Autentikacija |  
            
            | NETWORK | 
            LOW | 
            NONE | 
             
         
         | 
    
      
        | Impact | 
        
        
            | Povjerljivost | Cjelovitost | Dostupnost |  
            
            | NONE | 
            NONE | 
            PARTIAL | 
             
         
         | 
    
    
        | CVSS vektor | 
        AV:N/AC:L/Au:N/C:N/I:N/A:P | 
      
      
          | Zadnje važnije ažuriranje | 
          
            21-05-2019 - 13:14 | 
          
      
      
          | Objavljeno | 
          
            20-05-2019 - 16:29 |