CVE-2018-7589

Description

References

• dtschump/CImg · Third Party Advisory
• xiaoqx/pocs · Exploit
• lists.debian.org/debian-lts-announce/2019/09/msg00030.html
• lists.debian.org/debian-lts-announce/2020/10/msg00033.html
• usn.ubuntu.com/4039-1

Altre vulnerabilità di cimg

• CVE-2024-26540ALTO 7.8A heap-based buffer overflow in Clmg before 3.3.3 can occur via a crafted file to cimg_library::CImg<unsigned char>::_load_analyze.
• CVE-2023-41484ALTO 8.1An issue in cimg.eu Cimg Library v2.9.3 allows an attacker to obtain sensitive information via a crafted JPEG file.
• CVE-2022-1325MEDIO 5.5A flaw was found in Clmg, where with the help of a maliciously crafted pandore or bmp file with modified dx and dy header field values it is…
• CVE-2020-25693ALTO 8.1A flaw was found in CImg in versions prior to 2.9.3. Integer overflows leading to heap buffer overflows in load_pnm() can be triggered by a …
• CVE-2019-13568ALTO 8.8CImg through 2.6.7 has a heap-based buffer overflow in _load_bmp in CImg.h because of erroneous memory allocation for a malformed BMP image.