CVE-2026-47667

CVE-2026-47667 affects the CImg Library prior to 4.0.0. In _load_analyze(), header_size is read as an unsigned int from the first 4 bytes of an Analyze/NIfTI header and passed directly to new unsigned char[header_size] without bounding to the actual file size. Values up to ~4 GB are accepted; if ...

CVE-2026-47667 CImg Library: Uncontrolled Memory Allocation and Memory Leak in `_load_analyze()` via Crafted NIfTI/Analyze Header

CImg Library is a C++ library for image processing. Prior to version 4.0.0 in loadanalyze, the headersize field is read as an unsigned int from the first 4 bytes of an Analyze/NIfTI file and passed directly to new unsigned charheadersize without being bounded against the actual file size. A value...

UBUNTU-CVE-2024-26540

A heap-based buffer overflow in Clmg before 3.3.3 can occur via a crafted file to cimglibrary::CImg::loadanalyze...