CVE-2018-7640

概要

参考情報

• dtschump/CImg · Exploit
• lists.debian.org/debian-lts-announce/2019/09/msg00030.html
• lists.debian.org/debian-lts-announce/2020/10/msg00033.html

cimg のその他の脆弱性

• CVE-2024-26540高 7.8A heap-based buffer overflow in Clmg before 3.3.3 can occur via a crafted file to cimg_library::CImg<unsigned char>::_load_analyze.
• CVE-2023-41484高 8.1An issue in cimg.eu Cimg Library v2.9.3 allows an attacker to obtain sensitive information via a crafted JPEG file.
• CVE-2022-1325中 5.5A flaw was found in Clmg, where with the help of a maliciously crafted pandore or bmp file with modified dx and dy header field values it is…
• CVE-2020-25693高 8.1A flaw was found in CImg in versions prior to 2.9.3. Integer overflows leading to heap buffer overflows in load_pnm() can be triggered by a …
• CVE-2019-13568高 8.8CImg through 2.6.7 has a heap-based buffer overflow in _load_bmp in CImg.h because of erroneous memory allocation for a malformed BMP image.