{
  "cveId": "CVE-2019-12212",
  "url": "https://patchblox.com/security/cve/CVE-2019-12212",
  "summary": "CVE-2019-12212 is fixed in 2 products on 1 platform, first by libfreeimage3 3.17.0\u002Bds1-5\u002Bdeb9u1ubuntu0.1~esm1, released August 22, 2023. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "libfreeimage3: When FreeImage 3.18.0 reads a special JXR file, the StreamCalcIFDSizefunction of JXRMeta.c repeatedly calls itself du...",
  "description": "When FreeImage 3.18.0 reads a special JXR file, the StreamCalcIFDSizefunction of JXRMeta.c repeatedly calls itself due to improper processing ofthe file, eventually causing stack exhaustion. An attacker can achieve aremote denial of service attack by sending a specially constructed file.",
  "published": "2019-05-20T09:29:00Z",
  "severity": "Medium",
  "epss": 0.01897,
  "epssPercentile": 0.79764,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "libfreeimage3",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "3.17.0\u002Bds1-5\u002Bdeb9u1ubuntu0.1~esm1",
      "fix": "libfreeimage3 3.17.0\u002Bds1-5\u002Bdeb9u1ubuntu0.1~esm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libfreeimage3-3.17.0-ds1-5-deb9u1ubuntu0.1-esm1",
      "released": "2023-08-22T12:16:00Z"
    },
    {
      "platform": "linux",
      "product": "libfreeimage3",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "3.18.0\u002Bds2-1ubuntu3.1",
      "fix": "libfreeimage3 3.18.0\u002Bds2-1ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-libfreeimage3-3.18.0-ds2-1ubuntu3.1",
      "released": "2023-08-22T12:16:00Z"
    },
    {
      "platform": "linux",
      "product": "libfreeimage3",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "3.18.0\u002Bds2-6ubuntu5.1",
      "fix": "libfreeimage3 3.18.0\u002Bds2-6ubuntu5.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libfreeimage3-3.18.0-ds2-6ubuntu5.1",
      "released": "2023-08-22T12:16:00Z"
    },
    {
      "platform": "linux",
      "product": "libfreeimage3",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "3.18.0\u002Bds2-10build4",
      "fix": "libfreeimage3 3.18.0\u002Bds2-10build4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-libfreeimage3-3.18.0-ds2-10build4",
      "released": "2023-08-22T12:16:00Z"
    },
    {
      "platform": "linux",
      "product": "libfreeimage3",
      "release": "Ubuntu 24.10 (oracular)",
      "fixedVersion": "3.18.0\u002Bds2-10build4",
      "fix": "libfreeimage3 3.18.0\u002Bds2-10build4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-oracular-libfreeimage3-3.18.0-ds2-10build4",
      "released": "2026-01-16T01:42:22Z"
    },
    {
      "platform": "linux",
      "product": "libfreeimageplus3",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "3.17.0\u002Bds1-5\u002Bdeb9u1ubuntu0.1~esm1",
      "fix": "libfreeimageplus3 3.17.0\u002Bds1-5\u002Bdeb9u1ubuntu0.1~esm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libfreeimageplus3-3.17.0-ds1-5-deb9u1ubuntu0.1-esm1",
      "released": "2023-08-22T12:16:00Z"
    },
    {
      "platform": "linux",
      "product": "libfreeimageplus3",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "3.18.0\u002Bds2-1ubuntu3.1",
      "fix": "libfreeimageplus3 3.18.0\u002Bds2-1ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-libfreeimageplus3-3.18.0-ds2-1ubuntu3.1",
      "released": "2023-08-22T12:16:00Z"
    },
    {
      "platform": "linux",
      "product": "libfreeimageplus3",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "3.18.0\u002Bds2-6ubuntu5.1",
      "fix": "libfreeimageplus3 3.18.0\u002Bds2-6ubuntu5.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libfreeimageplus3-3.18.0-ds2-6ubuntu5.1",
      "released": "2023-08-22T12:16:00Z"
    },
    {
      "platform": "linux",
      "product": "libfreeimageplus3",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "3.18.0\u002Bds2-10build4",
      "fix": "libfreeimageplus3 3.18.0\u002Bds2-10build4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-libfreeimageplus3-3.18.0-ds2-10build4",
      "released": "2023-08-22T12:16:00Z"
    },
    {
      "platform": "linux",
      "product": "libfreeimageplus3",
      "release": "Ubuntu 24.10 (oracular)",
      "fixedVersion": "3.18.0\u002Bds2-10build4",
      "fix": "libfreeimageplus3 3.18.0\u002Bds2-10build4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-oracular-libfreeimageplus3-3.18.0-ds2-10build4",
      "released": "2026-01-16T01:42:22Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}