USN-7437-1: CImg library vulnerabilities

It was discovered that the CImg library did not properly check the size of images before loading them. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 22.04 LTS. CVE-2022-1325 It was discovered that the CImg library did not correctly handle...

Ubuntu 18.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 : CImg library vulnerabilities (USN-7437-1)

The remote Ubuntu 18.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7437-1 advisory. It was discovered that the CImg library did not properly check the size of images before loading them. An attacker could...

CVE-2024-26540

A heap-based buffer overflow in Clmg before 3.3.3 can occur via a crafted file to cimglibrary::CImg::loadanalyze...

UBUNTU-CVE-2024-26540

A heap-based buffer overflow in Clmg before 3.3.3 can occur via a crafted file to cimglibrary::CImg::loadanalyze...

CImg Security Vulnerabilities

CImg is a small open source C++ toolkit for image processing from GREYC Open Source. A security vulnerability exists in versions prior to Clmg 3.3.3. An attacker exploited this vulnerability to cause a heap-based buffer overflow via a specially crafted cimglibrary::CImg::loadanalyze file...

CVE-2024-26540

A heap-based buffer overflow in Clmg before 3.3.3 can occur via a crafted file to cimglibrary::CImg::loadanalyze...

PT-2024-21417 · Cimg +3 · Cimg +3

Name of the Vulnerable Software and Affected Versions: Clmg versions prior to 3.3.3 Description: A heap-based buffer overflow can occur via a crafted file to cimg library::CImg:: load analyze. This issue allows for potential exploitation. Recommendations: For versions prior to 3.3.3, update to...

Ubuntu 18.04 LTS : CImg vulnerabilities (USN-4039-1)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4039-1 advisory. It was discovered that allocation failures could occur in CImg when loading crafted bmp images. An attacker could possibly use this issue to cause a deni...

CVE-2023-41484

An issue in cimg.eu Cimg Library v2.9.3 allows an attacker to obtain sensitive information via a crafted JPEG file...

CVE-2023-41484

An issue in cimg.eu Cimg Library v2.9.3 allows an attacker to obtain sensitive information via a crafted JPEG file...

Design/Logic Flaw

An issue in cimg.eu Cimg Library v2.9.3 allows an attacker to obtain sensitive information via a crafted JPEG file...

CVE-2023-41484

An issue in cimg.eu Cimg Library v2.9.3 allows an attacker to obtain sensitive information via a crafted JPEG file...

CVE-2023-41484

Technical details about CVE-2023-41484 are not publicly provided in the supplied documents. Monitor for updates from vendors and security trackers for affected versions, remediation, and exploit information.

Missing Release of Memory after Effective Lifetime

An issue in cimg.eu Cimg Library v2.9.3 allows an attacker to obtain sensitive information via a crafted JPEG file...

CImg Library Security Vulnerability

CImg Library is an open source C++ library for image processing organized by Davidtschumperlé Greyc. A security vulnerability exists in CImg Library version v2.9.3. The vulnerability is exploited by attackers to obtain sensitive information via specially crafted JPEG files...

PT-2023-27958 · Unknown · Cimg Library

Name of the Vulnerable Software and Affected Versions: Cimg Library version 2.9.3 Description: An issue in the Cimg Library allows an attacker to obtain sensitive information via a crafted JPEG file. Recommendations: For version 2.9.3, at the moment, there is no information about a newer version...

CVE-2023-41484

An issue in cimg.eu Cimg Library v2.9.3 allows an attacker to obtain sensitive information via a crafted JPEG file...

CVE-2023-41484

An issue in cimg.eu Cimg Library v2.9.3 allows an attacker to obtain sensitive information via a crafted JPEG file...

Ubuntu: Security Advisory (USN-4039-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-25693

A flaw was found in the CImg library. Multiple integer overflows lead to heap buffer overflows in loadpnm, which can be triggered by a specially crafted input file processed by CImg. The highest risk from this vulnerability is to integrity and system availability...