Lucene search
K

16 matches found

Snyk
Snyk
added 2026/05/04 7:29 p.m.5 views

Memory Allocation with Excessive Size Value

Overview Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value in the nbcolors field of the BMP file header during the loadbmp process. An attacker can cause an out-of-memory condition and crash the application by supplying a crafted BMP file with a large...

6.8CVSS5.8AI score0.00119EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2018-19310

Malware in sbrugna...

7.8CVSS7.5AI score0.01364EPSS
Exploits1References8
Tenable Nessus
Tenable Nessus
added 2025/08/30 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2018-7638

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in CImg v.220. A heap-based buffer over-read in loadbmp in CImg.h occurs when loading a crafted bmp image, a different vulnerability tha...

7.8CVSS7.5AI score0.01268EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2025/08/21 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2023-51105

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A floating point exception divide-by-zero vulnerability was discovered in Artifex MuPDF 1.23.4 in function bmpdecompressrle4 of load-bmp.c. CVE-2023-51105 Note...

7.5CVSS7.3AI score0.00922EPSS
Exploits1References2
SUSE CVE
SUSE CVE
added 2023/12/28 2:22 a.m.2 views

SUSE CVE-2023-51105

A floating point exception divide-by-zero vulnerability was discovered in Artifex MuPDF 1.23.4 in function bmpdecompressrle4 of load-bmp.c...

7.5CVSS7AI score0.00922EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2023/08/17 12:0 a.m.5 views

PT-2023-26793 · Ntsc-Crt · Ntsc-Crt

Name of the Vulnerable Software and Affected Versions: NTSC-CRT version 2.2.1 Description: The issue is related to an integer overflow and out-of-bounds write in the loadBMP function in bmp rw.c. This occurs because the file's width, height, and BPP are not validated. The vendor notes that the ma...

7.5CVSS7.5AI score0.00612EPSS
Exploits1References7
OSV
OSV
added 2022/01/10 2:10 p.m.19 views

CVE-2021-43579

A stack-based buffer overflow in imageloadbmp in HTMLDOC = 1.9.13 results in remote code execution if the victim converts an HTML document linking to a crafted BMP file...

7.8CVSS7.8AI score
Exploits0References5
CNNVD
CNNVD
added 2022/01/10 12:0 a.m.4 views

HTMLDOC 缓冲区错误漏洞

HTMLDOC is an open source program that converts HTML and Markdown files to EPUB, Indexed HTML, PostScript and PDF formats. A security vulnerability exists in HTMLDOC that stems from a remote code execution due to a stack-based buffer overflow in image load bmp in HTMLDOC = 1.9.13...

7.8CVSS8.3AI score0.07349EPSS
Exploits4References9
Positive Technologies
Positive Technologies
added 2021/11/12 12:0 a.m.2 views

PT-2021-23884 · Htmldoc +5 · Htmldoc +5

Name of the Vulnerable Software and Affected Versions: HTMLDOC versions prior to 1.9.14 Description: A stack-based buffer overflow in the image load bmp function results in remote code execution if the victim converts an HTML document linking to a crafted BMP file. Recommendations: For versions...

10CVSS7.5AI score0.07349EPSS
Exploits22References111
RedHat Linux
RedHat Linux
added 2020/01/30 9:6 a.m.1 views

SDL: heap-based buffer overflow in SDL blit functions in video/SDL_blit*.c

A heap-based buffer overflow was discovered in SDL in the SDLBlitCopy function, that was called while copying an existing surface into a new optimized one, due to lack of validation while loading a BMP image in the SDLLoadBMPRW function. An application that uses SDL to parse untrusted input files...

8.1CVSS7.6AI score0.03299EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2019/11/25 1:17 p.m.3 views

SDL: heap-based buffer overflow in SDL blit functions in video/SDL_blit*.c

A heap-based buffer overflow was discovered in SDL in the SDLBlitCopy function, that was called while copying an existing surface into a new optimized one, due to lack of validation while loading a BMP image in the SDLLoadBMPRW function. An application that uses SDL to parse untrusted input files...

8.1CVSS7.6AI score0.03299EPSS
Exploits1References4
CNVD
CNVD
added 2019/08/01 12:0 a.m.3 views

CImg Heap Buffer Overflow Vulnerability

CImg Library is an open source C++ library for image processing . A buffer overflow vulnerability exists in the loadbmp file in the CImg.h file in CImg Library versions 2.6.7 and earlier. The vulnerability stems from a networked system or product performing operations in memory without properly...

8.8CVSS7.3AI score0.01749EPSS
Exploits0References1
CNVD
CNVD
added 2018/03/05 12:0 a.m.2 views

Cimg heap buffer out-of-bounds read vulnerability (CNVD-2018-05449)

CImg is an open source C++ tool library for image processing . A heap buffer out-of-bounds read vulnerability exists in the 'loadbmp' function of the CImg.h file in CImg version 220. No detailed vulnerability details are provided at this time...

7.8CVSS7.1AI score0.01268EPSS
Exploits1References1
OSV
OSV
added 2018/03/02 2:29 p.m.0 views

UBUNTU-CVE-2018-7637

An issue was discovered in CImg v.220. A heap-based buffer over-read in loadbmp in CImg.h occurs when loading a crafted bmp image, a different vulnerability than CVE-2018-7588. This is in a "16 colors" case, aka case 4...

7.8CVSS7.3AI score0.01268EPSS
Exploits1References4
CNVD
CNVD
added 2018/03/02 12:0 a.m.2 views

Cimg Denial of Service Vulnerability

CImg is an open source C++ tool library for image processing . A security vulnerability exists in the loadbmp file of the CImg.h file in CImg version 220. An attacker can exploit this vulnerability to cause a denial of service with a specially crafted bmp image...

7.8CVSS6.7AI score0.01115EPSS
Exploits1References1
CNVD
CNVD
added 2018/03/02 12:0 a.m.2 views

Cimg Double Release Vulnerability

CImg is an open source C++ tool library for image processing . A double release vulnerability exists in the loadbmp file of the CImg.h file in CImg version 220. No details of the vulnerability are provided at this time...

7.8CVSS7AI score0.01364EPSS
Exploits1References1
Rows per page
Query Builder