Integer Overflow Vulnerability in Imlib2 Affected by Memory Allocation Issues

CVE-2020-12761

Summary

The Imlib2 image loading library version 1.6.0 is susceptible to an integer overflow vulnerability found in the loader for ICO files. This vulnerability occurs when processing an icon containing numerous colors in its color map, leading to invalid memory allocations and out-of-bounds read operations. Attackers can exploit this flaw to potentially manipulate the application's behavior or expose sensitive data.

References