CImg vulnerabilities

2019-06-26T00:00:00
ID USN-4039-1
Type ubuntu
Reporter Ubuntu
Modified 2019-06-26T00:00:00

Description

It was discovered that allocation failures could occur in CImg when loading
crafted bmp images. An attacker could possibly use this issue to cause a
denial of service. (CVE-2018-7587)

It was discovered that a heap-based buffer over-read existed in CImg when
loading crafted bmp images. An attacker could possibly use this issue to
execute arbitrary code. (CVE-2018-7588)

It was discovered that a double free existed in CImg when loading crafted
bmp images. An attacker could possibly use this issue to execute arbitrary
code. (CVE-2018-7589)