LogoFail-PoC

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the safe return of all citizens who have been taken hostage by the terrorist group Hamas. We will not rest until every hostage is released and returns home safely. You can help bring them back home.https://stories.bringthemhomenow.net/ BIOS Image Parser...

CLEANSTART-2024-DU55752 exploitable code execution vulnerability exists in the BMP image rendering functionality of SDL2_image-2

Security vulnerability affects the sdl2image package. An exploitable code execution vulnerability exists in the BMP image rendering functionality of SDL2image-2...

CLEANSTART-2025-MS24832 heap use-after-free flaw was found in coders/bmp

Security vulnerability affects the imagemagick package. A heap use-after-free flaw was found in coders/bmp...

CVE-2019-8014

CVE-2019-8014 的一点简单分析。 包含 Poc 和 exp Shellcode 是弹出计算器 or CMD 窗口，不记得了。 注意： my.7z 是触发漏洞需要的 bmp 图片 ，文件太大了，我压缩了一下。...

CVE-2013-3664_BMP

Sketchup BMP Material RLE4 Heap Overflow - CVE-2013-3664 SketchUp fails to validate the input when parsing an embedded BMP RLE4 compressed texture. Arbitrary code execution is proved possible after a malicious texture or thumbnail or background image triggers a heap overflow. The issue can also b...

CVE-2013-2729

Adobe Reader BMP/RLE heap corruption - CVE-2013-2729 Adobe Reader X is a powerful software solution developed by Adobe Systems to view, create, manipulate, print and manage files in Portable Document Format PDF. Since version 10 it includes the Protected Mode, a sandbox technology similar to the...

CLEANSTART-2026-XV23070 Decoding a paletted BMP file with an out-of-range palette index results in a panic when accessing pixels in the invalid image

CVE-2026-42500 affects multiple packages. Decoding a paletted BMP file with an out-of-range palette index results in a panic when accessing pixels in the invalid image. See references for individual vulnerability details...

CLEANSTART-2026-HB18377 Decoding a paletted BMP file with an out-of-range palette index results in a panic when accessing pixels in the invalid image

Security vulnerability affects the rclone package. Decoding a paletted BMP file with an out-of-range palette index results in a panic when accessing pixels in the invalid image...

CLEANSTART-2026-TE76539 Decoding a paletted BMP file with an out-of-range palette index results in a panic when accessing pixels in the invalid image

Security vulnerability affects the ollama package. Decoding a paletted BMP file with an out-of-range palette index results in a panic when accessing pixels in the invalid image...

CVE-2026-8824

A flaw was found in vtk. The image reader component, vtkBMPReader, improperly handles input boundaries, leading to a buffer overflow when processing bitmap BMP files. A remote attacker could exploit this vulnerability by providing a specially crafted BMP file, causing the application to crash and...

CVE-2026-116724

FLTK through 1.4.5 contains an integer overflow vulnerability in FlBMPImage::loadbmp that causes undersized pixel buffer allocation from file-supplied width and height. Attackers can supply a crafted BMP or ICO file with large dimensions so row decoding writes file-derived data past the heap...

BIT-PILLOW-2026-96638 Pillow: BMP RLE decoder memory-amplification DoS via unbounded delta escape / absolute mode

Pillow is a Python imaging library. From 9.1.0 until 13.0.0, BmpRleDecoder.decode in src/PIL/BmpImagePlugin.py permits crafted RLE BMP delta escapes and absolute-mode runs to append beyond the remaining destlength without a per-branch cap. A delta can add roughly 255 image rows in one iteration, ...

CVE-2026-117555

A flaw was found in cimg. An integer overflow vulnerability in the BMP image loader when calculating row dimensions can trigger an out-of-bounds memory read. An attacker can exploit this flaw by supplying a specially crafted BMP image file to an application using the library, potentially causing ...

PT-2026-132463

Pillow is a Python imaging library. From 9.1.0 until 13.0.0, BmpRleDecoder.decode in src/PIL/BmpImagePlugin.py permits crafted RLE BMP delta escapes and absolute-mode runs to append beyond the remaining dest length without a per-branch cap. A delta can add roughly 255 image rows in one iteration,...

VTK vtkBMPReader ExecuteDataWithInformation memory corruption vulnerability

Summary A memory corruption vulnerability exists in the vtkBMPReader ExecuteDataWithInformation functionality of vtk versions: 9.6.1. A specially crafted .bmp file can lead to a buffer overflow. An attacker can provide a malicious file to trigger this vulnerability. Confirmed Vulnerable Versions...

SUSE CVE-2026-116724

FLTK through 1.4.5 contains an integer overflow vulnerability in FlBMPImage::loadbmp that causes undersized pixel buffer allocation from file-supplied width and height. Attackers can supply a crafted BMP or ICO file with large dimensions so row decoding writes file-derived data past the heap...

CVE-2026-117555

CImg through 4.0.6 contains a heap out-of-bounds read vulnerability in the loadbmp function of CImg.h caused by an integer overflow in the row byte count. Attackers can supply a crafted BMP file with a large header width that wraps dxbytes, causing crashes or heap memory disclosure into the decod...

DEBIAN-CVE-2026-117555

CImg through 4.0.6 contains a heap out-of-bounds read vulnerability in the loadbmp function of CImg.h caused by an integer overflow in the row byte count. Attackers can supply a crafted BMP file with a large header width that wraps dxbytes, causing crashes or heap memory disclosure into the decod...

CVE-2026-117555 GreycLab CImg through 4.0.6 Heap Out-of-Bounds Read via Integer Overflow in _load_bmp()

CImg through 4.0.6 contains a heap out-of-bounds read vulnerability in the loadbmp function of CImg.h caused by an integer overflow in the row byte count. Attackers can supply a crafted BMP file with a large header width that wraps dxbytes, causing crashes or heap memory disclosure into the decod...

CVE-2026-117555 GreycLab CImg through 4.0.6 Heap Out-of-Bounds Read via Integer Overflow in _load_bmp()

CImg through 4.0.6 contains a heap out-of-bounds read vulnerability in the loadbmp function of CImg.h caused by an integer overflow in the row byte count. Attackers can supply a crafted BMP file with a large header width that wraps dxbytes, causing crashes or heap memory disclosure into the decod...