Heap-based Buffer Over-read in CImg Software by D.Tschump
CVE-2018-7640

7.8HIGH

Key Information:

Vendor: Cimg
Status: Cimg
Vendor: CVE Published:; 2 March 2018

What is CVE-2018-7640?

A vulnerability in CImg software version 220 allows for a heap-based buffer over-read when specifically loading crafted BMP images. This issue, which occurs in a monochrome scenario, can potentially lead to unintended data access or manipulation, presenting security risks to users relying on this image processing library.