CVE-2022-1325

CVE-2022-1325 affects Clmg, where a maliciously crafted pandore or bmp file with modified dx/dy headers can cause the application to allocate extremely large buffers (up to ~64 GB) when reading from disk or a buffer. This can lead to memory exhaustion/ DoS. The vulnerability details are supported...

CVE-2022-1325

A flaw was found in Clmg, where with the help of a maliciously crafted pandore or bmp file with modified dx and dy header field values it is possible to trick the application into allocating huge buffer sizes like 64 Gigabyte upon reading the file from disk or from a virtual buffer...

GREYC Clmg 安全漏洞

CImg is a small open source C++ toolkit for image processing from GREYC Open Source. A security vulnerability exists in GREYC Clmg. An attacker exploits the vulnerability to trick an application into allocating a huge buffer size such as 64GB when reading a file from disk or a virtual buffer...

Allocation of Resources Without Limits or Throttling

A flaw was found in Clmg, where with the help of a maliciously crafted pandore or bmp file with modified dx and dy header field values it is possible to trick the application into allocating huge buffer sizes like 64 Gigabyte upon reading the file from disk or from a virtual buffer...

CVE-2022-1325: Uncontrolled Resource Consumption

A flaw was found in Clmg, where with the help of a maliciously crafted pandore or bmp file with modified dx and dy header field values it is possible to trick the application into allocating huge buffer sizes like 64 Gigabyte upon reading the file from disk or from a virtual buffer...

PT-2022-13799 · Clmg +3 · Clmg +3

Name of the Vulnerable Software and Affected Versions: Clmg affected versions not specified Description: A flaw in Clmg allows an attacker to trick the application into allocating huge buffer sizes, such as 64 Gigabyte, by using a maliciously crafted pandore or bmp file with modified dx and dy...