Heap-Based Buffer Over-Read in CImg Affects Image Processing Capabilities
CVE-2018-7641

7.8HIGH

Key Information:

Vendor: Cimg
Status: Cimg
Vendor: CVE Published:; 2 March 2018

What is CVE-2018-7641?

A heap-based buffer over-read vulnerability exists in the CImg library version 220, specifically in the load_bmp function located in CImg.h. This issue arises when the library processes a specially crafted BMP image, particularly in configurations that handle 32-bit colors. This vulnerability may allow an attacker to read beyond the intended buffer, potentially disclosing sensitive information or leading to further exploit scenarios.