CVE-2018-7639

CVE-2018-7639 affects CImg v.220 and is a heap-based buffer over-read in load_bmp in CImg.h when loading a crafted BMP image in the 16-colors case (case 16). The issue is triggered by parsing a BMP header/image data and can lead to an out-of-bounds read. NVD metrics indicate a high severity for C...

CVE-2018-7638

CVE-2018-7638 affects CImg v.220, with a heap-based buffer over-read in load_bmp within CImg.h when processing crafted BMP images. The issue occurs in the 256-colors path (case 8). Public details in connected sources confirm the vulnerability mechanism but do not provide a concrete vendor patch o...

CVE-2018-7638

An issue was discovered in CImg v.220. A heap-based buffer over-read in loadbmp in CImg.h occurs when loading a crafted bmp image, a different vulnerability than CVE-2018-7588. This is in a "256 colors" case, aka case 8...

Cimg Double Release Vulnerability

CImg is an open source C++ tool library for image processing . A double release vulnerability exists in the loadbmp file of the CImg.h file in CImg version 220. No details of the vulnerability are provided at this time...

Cimg Denial of Service Vulnerability

CImg is an open source C++ tool library for image processing . A security vulnerability exists in the loadbmp file of the CImg.h file in CImg version 220. An attacker can exploit this vulnerability to cause a denial of service with a specially crafted bmp image...

Design/Logic Flaw

An issue was discovered in CImg v.220. DoS occurs when loading a crafted bmp image that triggers an allocation failure in loadbmp in CImg.h...

CVE-2018-7587

An issue was discovered in CImg v.220. DoS occurs when loading a crafted bmp image that triggers an allocation failure in loadbmp in CImg.h...

CVE-2018-7588

An issue was discovered in CImg v.220. A heap-based buffer over-read in loadbmp in CImg.h occurs when loading a crafted bmp image...

CVE-2018-7587

An issue was discovered in CImg v.220. DoS occurs when loading a crafted bmp image that triggers an allocation failure in loadbmp in CImg.h...

CVE-2018-7589

An issue was discovered in CImg v.220. A double free in loadbmp in CImg.h occurs when loading a crafted bmp image...

Heap overflow

An issue was discovered in CImg v.220. A heap-based buffer over-read in loadbmp in CImg.h occurs when loading a crafted bmp image...

CVE-2018-7589

An issue was discovered in CImg v.220. A double free in loadbmp in CImg.h occurs when loading a crafted bmp image...

Double free

An issue was discovered in CImg v.220. A double free in loadbmp in CImg.h occurs when loading a crafted bmp image...

CVE-2018-7588

An issue was discovered in CImg v.220. A heap-based buffer over-read in loadbmp in CImg.h occurs when loading a crafted bmp image...

CVE-2018-7589

An issue was discovered in CImg v.220. A double free in loadbmp in CImg.h occurs when loading a crafted bmp image...

CVE-2018-7589

An issue was discovered in CImg v.220. A double free in loadbmp in CImg.h occurs when loading a crafted bmp image...

CVE-2018-7588

An issue was discovered in CImg v.220. A heap-based buffer over-read in loadbmp in CImg.h occurs when loading a crafted bmp image...

CVE-2018-7587

CVE-2018-7587 affects CImg v2.20: DoS via crafted BMP images that trigger an allocation failure in load_bmp (CImg.h). Public advisories (Fedora, Mageia) note a patch/update to fix this in later CImg releases (e.g., 2.3.6). Other bulletins link additional CVEs for the same package (7588, 7589) wit...

CVE-2018-7588

An issue was discovered in CImg v.220. A heap-based buffer over-read in loadbmp in CImg.h occurs when loading a crafted bmp image...

CVE-2018-7587

An issue was discovered in CImg v.220. DoS occurs when loading a crafted bmp image that triggers an allocation failure in loadbmp in CImg.h...