152 matches found
Important: fltk
Issue Overview: FLTK through 1.4.5 contains a stack-based buffer overflow vulnerability in FlBMPImage::loadbmp that allows attackers to corrupt stack memory by supplying an oversized BMP colorsused field. Attackers can craft BMP or ICO files with colorsused above 256 to overflow the 768-byte...
Important: fltk
Issue Overview: FLTK through 1.4.5 contains a stack-based buffer overflow vulnerability in FlBMPImage::loadbmp that allows attackers to corrupt stack memory by supplying an oversized BMP colorsused field. Attackers can craft BMP or ICO files with colorsused above 256 to overflow the 768-byte...
OPENSUSE-SU-2026:12362-1 fltk-devel-1.3.11-2.1 on GA media
These are all security issues fixed in the fltk-devel-1.3.11-2.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-134787
These are all security issues fixed in the fltk-devel-1.3.11-2.1 package on the GA media of openSUSE Tumbleweed...
CVE-2026-116724
FLTK through 1.4.5 contains an integer overflow vulnerability in FlBMPImage::loadbmp that causes undersized pixel buffer allocation from file-supplied width and height. Attackers can supply a crafted BMP or ICO file with large dimensions so row decoding writes file-derived data past the heap...
CVE-2026-116723
FLTK through 1.4.5 contains a stack-based buffer overflow vulnerability in FlBMPImage::loadbmp that allows attackers to corrupt stack memory by supplying an oversized BMP colorsused field. Attackers can craft BMP or ICO files with colorsused above 256 to overflow the 768-byte colormap array,...
SUSE CVE-2026-116723
FLTK through 1.4.5 contains a stack-based buffer overflow vulnerability in FlBMPImage::loadbmp that allows attackers to corrupt stack memory by supplying an oversized BMP colorsused field. Attackers can craft BMP or ICO files with colorsused above 256 to overflow the 768-byte colormap array,...
SUSE CVE-2026-116724
FLTK through 1.4.5 contains an integer overflow vulnerability in FlBMPImage::loadbmp that causes undersized pixel buffer allocation from file-supplied width and height. Attackers can supply a crafted BMP or ICO file with large dimensions so row decoding writes file-derived data past the heap...
CVE-2026-116723
A flaw was found in FLTK. This vulnerability allows an attacker to achieve arbitrary code execution or cause a Denial of Service DoS by convincing a user to open a specially crafted BMP or ICO image file. The issue occurs due to a stack-based buffer overflow when parsing image headers with an...
CVE-2026-116724
A flaw was found in FLTK. An attacker could achieve arbitrary code execution or cause a Denial of Service DoS by convincing a user to open a specially crafted BMP or ICO image file. Due to an integer overflow when calculating image dimensions, the application allocates an undersized memory buffer...
EUVD-2026-110505
FLTK through 1.4.5 contains an integer overflow vulnerability in FlBMPImage::loadbmp that causes undersized pixel buffer allocation from file-supplied width and height. Attackers can supply a crafted BMP or ICO file with large dimensions so row decoding writes file-derived data past the heap...
EUVD-2026-110504
FLTK through 1.4.5 contains a stack-based buffer overflow vulnerability in FlBMPImage::loadbmp that allows attackers to corrupt stack memory by supplying an oversized BMP colorsused field. Attackers can craft BMP or ICO files with colorsused above 256 to overflow the 768-byte colormap array,...
Linux Distros Unpatched Vulnerability : CVE-2026-116724
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FLTK through 1.4.5 contains an integer overflow vulnerability in FlBMPImage::loadbmp that causes undersized pixel buffer allocation from file-supplied width and...
Linux Distros Unpatched Vulnerability : CVE-2026-116723
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FLTK through 1.4.5 contains a stack-based buffer overflow vulnerability in FlBMPImage::loadbmp that allows attackers to corrupt stack memory by supplying an...
DEBIAN-CVE-2026-116724
FLTK through 1.4.5 contains an integer overflow vulnerability in FlBMPImage::loadbmp that causes undersized pixel buffer allocation from file-supplied width and height. Attackers can supply a crafted BMP or ICO file with large dimensions so row decoding writes file-derived data past the heap...
AZL-111109 CVE-2026-116724 affecting package fltk 1.3.8-1
FLTK through 1.4.5 contains an integer overflow vulnerability in FlBMPImage::loadbmp that causes undersized pixel buffer allocation from file-supplied width and height. Attackers can supply a crafted BMP or ICO file with large dimensions so row decoding writes file-derived data past the heap...
CVE-2026-116724
FLTK through 1.4.5 contains an integer overflow vulnerability in FlBMPImage::loadbmp that causes undersized pixel buffer allocation from file-supplied width and height. Attackers can supply a crafted BMP or ICO file with large dimensions so row decoding writes file-derived data past the heap...
AZL-111106 CVE-2026-116723 affecting package fltk 1.3.8-1
FLTK through 1.4.5 contains a stack-based buffer overflow vulnerability in FlBMPImage::loadbmp that allows attackers to corrupt stack memory by supplying an oversized BMP colorsused field. Attackers can craft BMP or ICO files with colorsused above 256 to overflow the 768-byte colormap array,...
DEBIAN-CVE-2026-116723
FLTK through 1.4.5 contains a stack-based buffer overflow vulnerability in FlBMPImage::loadbmp that allows attackers to corrupt stack memory by supplying an oversized BMP colorsused field. Attackers can craft BMP or ICO files with colorsused above 256 to overflow the 768-byte colormap array,...
CVE-2026-116723
FLTK through 1.4.5 contains a stack-based buffer overflow vulnerability in FlBMPImage::loadbmp that allows attackers to corrupt stack memory by supplying an oversized BMP colorsused field. Attackers can craft BMP or ICO files with colorsused above 256 to overflow the 768-byte colormap array,...