643 matches found
CVE-2026-42146
CImg Library is a C++ library for image processing. Prior to commit c3aacf5, the nbcolors field read from the BMP file header is used directly to compute an allocation size without validating it against the remaining file size. A crafted BMP file with a large nbcolors value triggers an...
CVE-2026-42146: Memory Allocation with Excessive Size Value
CImg Library is a C++ library for image processing. Prior to commit c3aacf5, the nbcolors field read from the BMP file header is used directly to compute an allocation size without validating it against the remaining file size. A crafted BMP file with a large nbcolors value triggers an...
PT-2026-39530
SDL Simple DirectMedia Layer through 2.0.12 has a heap-based buffer over-read in Blit 3or4 to 3or4 inversed rgb in video/SDL blit N.c via a crafted .BMP file...
PT-2026-39529
SDL Simple DirectMedia Layer through 2.0.12 has an Integer Overflow and resultant SDL memcpy heap corruption in SDL BlitCopy in video/SDL blit copy.c via a crafted .BMP file...
CVE-2019-25563: Sensitive Information in Resource Not Removed Before Reuse
PCHelpWareV2 1.0.0.5 contains a denial of service vulnerability that allows local attackers to crash the application by supplying a malformed image file. Attackers can trigger the vulnerability through the Create SC feature by selecting a crafted BMP file with an oversized buffer, causing the...
CVE-2021-33657
There is a heap overflow problem in video/SDLpixels.c in SDL Simple DirectMedia Layer 2.x to 2.0.18 versions. By crafting a malicious .BMP file, an attacker can cause the application using this library to crash, denial of service or Code execution...
CVE-2021-31513
This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop Build 16.6.4.55. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2025-15279 FontForge GUtils BMP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
FontForge GUtils BMP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a...
CVE-2025-15279: Heap-based Buffer Overflow
FontForge GUtils BMP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a...
📄 HTMLDOC 1.9.13 Stack Buffer Overflow
Proof of concept exploit written in PHP for HTMLDOC version 1.9.13 that generates a malicious BMP file that will trigger a stack buffer overflow vulnerability...
CVE-2025-62171
ImageMagick is an open source software suite for displaying, converting, and editing raster image files. In ImageMagick versions prior to 7.1.2-7 and 6.9.13-32, an integer overflow vulnerability exists in the BMP decoder on 32-bit systems. The vulnerability occurs in coders/bmp.c when calculating...
EUVD-2009-1566
Malware in sbrugna...
EUVD-2013-3869
Malware in sbrugna...
EUVD-2014-1024
Malware in sbrugna...
EUVD-2015-8726
Malware in sbrugna...
EUVD-2017-17314
Malware in sbrugna...
EUVD-2018-17552
Malware in sbrugna...
EUVD-2021-21540
Malware in sbrugna...