Memory Corruption Vulnerability in SAIL Image Decoding Library

CVE-2025-32468

What is CVE-2025-32468?

A vulnerability has been identified in the BMPv3 image decoding functionality of the SAIL Image Decoding Library version 0.9.8. This flaw arises when a specially crafted BMP file is loaded, leading to an integer overflow during stride calculation for decoding. This overflow can result in a heap-based buffer overflow during image decoding, ultimately allowing an attacker to execute remote code. Successful exploitation requires the attacker to have the library process a malicious BMP file.

References