Heap-based Buffer Overflow in libilbm ILBM File Parsing Affects Multiple Vendors

CVE-2025-10935

What is CVE-2025-10935?

A vulnerability in libilbm's ILBM file parsing can lead to remote code execution due to improper validation of user-supplied data length when copying to a heap buffer. Attackers may exploit this flaw by crafting malicious ILBM files, requiring user interaction to trigger the exploit. When a vulnerable system processes such a file, it could allow the attacker to execute arbitrary code in the context of the current process, potentially compromising the system.

References