4 matches found
CVE-2026-111139
NetSurf libnsbmp through 0.1.7 contains an out-of-bounds read vulnerability in bmpdecodemask that allows attackers to read one byte past the image buffer by supplying crafted ICO files. Attackers can provide an ICO whose inner bitmap width is not a multiple of 8, causing a heap over-read that can...
CVE-2026-111139
The NetSurf libnsbmp library (versions through 0.1.7 ) is vulnerable to an out-of-bounds read in the bmp_decode_mask() function. By providing a crafted ICO file where the inner bitmap width is not a multiple of 8, an attacker can trigger a heap over-read that reads one byte past the image buffer....
CVE-2026-111139 NetSurf libnsbmp through 0.1.7 Out-of-Bounds Read via bmp_decode_mask
NetSurf libnsbmp through 0.1.7 contains an out-of-bounds read vulnerability in bmpdecodemask that allows attackers to read one byte past the image buffer by supplying crafted ICO files. Attackers can provide an ICO whose inner bitmap width is not a multiple of 8, causing a heap over-read that can...
EUVD-2026-102266
NetSurf libnsbmp through 0.1.7 contains an out-of-bounds read vulnerability in bmpdecodemask that allows attackers to read one byte past the image buffer by supplying crafted ICO files. Attackers can provide an ICO whose inner bitmap width is not a multiple of 8, causing a heap over-read that can...