CVE-2026-94030

A security vulnerability has been detected in SerenityOS up to 3d83e4509fd20d7438e1ae8470ffe668c136229c. Affected by this vulnerability is the function decodebmppixeldata of the file Userland/Libraries/LibGfx/ImageFormats/BMPLoader.cpp of the component LibGfx. The manipulation of the argument...

CVE-2026-94030

CVE-2026-94030 is an integer overflow in the decode_bmp_pixel_data function of BMPLoader.cpp within SerenityOS's LibGfx component. Manipulating the height argument triggers the overflow, and the attack is remote with high complexity . A minimal 55-byte PoC was produced via the standard image-deco...

CVE-2026-94030 SerenityOS LibGfx BMPLoader.cpp decode_bmp_pixel_data integer overflow

A security vulnerability has been detected in SerenityOS up to 3d83e4509fd20d7438e1ae8470ffe668c136229c. Affected by this vulnerability is the function decodebmppixeldata of the file Userland/Libraries/LibGfx/ImageFormats/BMPLoader.cpp of the component LibGfx. The manipulation of the argument...

CVE-2026-94030 SerenityOS LibGfx BMPLoader.cpp decode_bmp_pixel_data integer overflow

A security vulnerability has been detected in SerenityOS up to 3d83e4509fd20d7438e1ae8470ffe668c136229c. Affected by this vulnerability is the function decodebmppixeldata of the file Userland/Libraries/LibGfx/ImageFormats/BMPLoader.cpp of the component LibGfx. The manipulation of the argument...

CVE-2026-94030 SerenityOS LibGfx BMPLoader.cpp decode_bmp_pixel_data integer overflow

A security vulnerability has been detected in SerenityOS up to 3d83e4509fd20d7438e1ae8470ffe668c136229c. Affected by this vulnerability is the function decodebmppixeldata of the file Userland/Libraries/LibGfx/ImageFormats/BMPLoader.cpp of the component LibGfx. The manipulation of the argument...

EUVD-2026-83743

A security vulnerability has been detected in SerenityOS up to 3d83e4509fd20d7438e1ae8470ffe668c136229c. Affected by this vulnerability is the function decodebmppixeldata of the file Userland/Libraries/LibGfx/ImageFormats/BMPLoader.cpp of the component LibGfx. The manipulation of the argument...

CVE-2026-94030: Integer Overflow or Wraparound

A security vulnerability has been detected in SerenityOS up to 3d83e4509fd20d7438e1ae8470ffe668c136229c. Affected by this vulnerability is the function decodebmppixeldata of the file Userland/Libraries/LibGfx/ImageFormats/BMPLoader.cpp of the component LibGfx. The manipulation of the argument...

OSV-2023-936 Heap-buffer-overflow in Gfx::decode_bmp_pixel_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62782 Crash type: Heap-buffer-overflow READ 1 Crash state: Gfx::decodebmppixeldata Gfx::BMPImageDecoderPlugin::frame Gfx::ICOImageDecoderPlugin::loadicobitmap...

serenity:FuzzBMPLoader: Bad-cast to AK::Array<AK::TypeErasedParameter, 0>Gfx::decode_bmp_pixel_data in Gfx::load_bmp_impl

Project: https://github.com/SerenityOS/serenity.git Detailed Report: https://oss-fuzz.com/testcase?key=6225042082496512 Project: serenity Fuzzing Engine: libFuzzer Fuzz Target: FuzzBMPLoader Job Type: libfuzzerubsanserenity Platform Id: linux Crash Type: Bad-cast Crash Address: 0x7fff7e440628 Cra...

serenity:FuzzBMPLoader: Bad-cast to AK::Array<AK::TypeErasedParameter, 0>Gfx::decode_bmp_pixel_data in Gfx::load_bmp_impl

Project: https://github.com/SerenityOS/serenity.git Detailed Report: https://oss-fuzz.com/testcase?key=4603556659331072 Project: serenity Fuzzing Engine: libFuzzer Fuzz Target: FuzzBMPLoader Job Type: libfuzzerubsanserenity Platform Id: linux Crash Type: Bad-cast Crash Address: 0x7ffd36bec4d8 Cra...