CVE-2018-7637

CVE-2018-7637 affects CImg v.220, specifically a heap-based buffer over-read in load_bmp of CImg.h when loading crafted BMP images. The issue is described as occurring in the 16 colors case (case 4). Connected materials also reference related CVEs in the same CImg load_bmp path (e.g., CVE-2018-75...

CVE-2018-7640

An issue was discovered in CImg v.220. A heap-based buffer over-read in loadbmp in CImg.h occurs when loading a crafted bmp image, a different vulnerability than CVE-2018-7588. This is in a Monochrome case, aka case 1...

CVE-2018-7641

An issue was discovered in CImg v.220. A heap-based buffer over-read in loadbmp in CImg.h occurs when loading a crafted bmp image, a different vulnerability than CVE-2018-7588. This is in a "32 bits colors" case, aka case 32...

CVE-2018-7640

An issue was discovered in CImg v.220. A heap-based buffer over-read in loadbmp in CImg.h occurs when loading a crafted bmp image, a different vulnerability than CVE-2018-7588. This is in a Monochrome case, aka case 1...

CVE-2018-7637

An issue was discovered in CImg v.220. A heap-based buffer over-read in loadbmp in CImg.h occurs when loading a crafted bmp image, a different vulnerability than CVE-2018-7588. This is in a "16 colors" case, aka case 4...

CVE-2018-7641

An issue was discovered in CImg v.220. A heap-based buffer over-read in loadbmp in CImg.h occurs when loading a crafted bmp image, a different vulnerability than CVE-2018-7588. This is in a "32 bits colors" case, aka case 32...

CVE-2018-7637

An issue was discovered in CImg v.220. A heap-based buffer over-read in loadbmp in CImg.h occurs when loading a crafted bmp image, a different vulnerability than CVE-2018-7588. This is in a "16 colors" case, aka case 4...

CVE-2018-7638

CVE-2018-7638 affects CImg v.220, with a heap-based buffer over-read in load_bmp within CImg.h when processing crafted BMP images. The issue occurs in the 256-colors path (case 8). Public details in connected sources confirm the vulnerability mechanism but do not provide a concrete vendor patch o...

CVE-2018-7639

CVE-2018-7639 affects CImg v.220 and is a heap-based buffer over-read in load_bmp in CImg.h when loading a crafted BMP image in the 16-colors case (case 16). The issue is triggered by parsing a BMP header/image data and can lead to an out-of-bounds read. NVD metrics indicate a high severity for C...

CVE-2018-7638

An issue was discovered in CImg v.220. A heap-based buffer over-read in loadbmp in CImg.h occurs when loading a crafted bmp image, a different vulnerability than CVE-2018-7588. This is in a "256 colors" case, aka case 8...

Debian DLA-1297-1 : freexl security update

Leon reported five heap-based buffer-overflow vulnerabilities in FreeXL. CVE-2018-7435 There is a heap-based buffer over-read in the freexl::destroycell function. CVE-2018-7436 There is a heap-based buffer over-read in a pointer dereference of the parseSST function. CVE-2018-7437 There is a...

Heap overflow

An issue was discovered in CImg v.220. A heap-based buffer over-read in loadbmp in CImg.h occurs when loading a crafted bmp image...

CVE-2018-7588

An issue was discovered in CImg v.220. A heap-based buffer over-read in loadbmp in CImg.h occurs when loading a crafted bmp image...

CVE-2018-7588

An issue was discovered in CImg v.220. A heap-based buffer over-read in loadbmp in CImg.h occurs when loading a crafted bmp image...

CVE-2018-7588

CVE-2018-7588 affects the CImg image processing library (v2.20) and is due to a heap-based buffer over-read in the load_bmp function of CImg.h when loading a crafted BMP image. The issue is tied to the BMP-loading path in CImg and can lead to memory over-read during image parsing. In affected env...

CVE-2018-7588

An issue was discovered in CImg v.220. A heap-based buffer over-read in loadbmp in CImg.h occurs when loading a crafted bmp image...

[SECURITY] [DLA 1297-1] freexl security update

Package : freexl Version : 1.0.0b-1+deb7u5 CVE ID : CVE-2018-7435 CVE-2018-7436 CVE-2018-7437 CVE-2018-7438 CVE-2018-7439 Leon reported five heap-based buffer-overflow vulnerabilities in FreeXL. CVE-2018-7435 There is a heap-based buffer over-read in the freexl::destroycell function. CVE-2018-743...

Simple DirectMedia Layer SDL2_image load_xcf_tile_rle Decompression Code Execution Vulnerability

Summary An exploitable code execution vulnerability exists in the XCF image rendering functionality of SDL2image-2.0.2. A specially crafted XCF image can cause a heap overflow resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability. Tested...

CVE-2018-7588

An issue was discovered in CImg v.220. A heap-based buffer over-read in loadbmp in CImg.h occurs when loading a crafted bmp image...

Updated TiMidity++ packages fix security vulnerabilities

The insertnotesteps function in readmidi.c in TiMidity++ 2.14.0 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted mid file. NOTE: a crash might be relevant when using the --background option CVE-2017-11546. The resamplegauss function in...