Heap-Based Buffer Over-Read in CImg Library Affects Image Processing
CVE-2018-7637

7.8HIGH

Key Information:

Vendor: Cimg
Status: Cimg
Vendor: CVE Published:; 2 March 2018

What is CVE-2018-7637?

A vulnerability in the CImg library, specifically in the load_bmp function within CImg.h, allows for a heap-based buffer over-read when handling specially crafted BMP images. This issue primarily arises during the loading of images in a '16 colors' format, classified as case 4. The flaw could potentially expose sensitive information or lead to undefined behaviors within applications utilizing this library.