Memory Corruption Vulnerability in SAIL Image Decoding Library

CVE-2025-46407

What is CVE-2025-46407?

A memory corruption issue has been identified in the BMPv3 Palette Decoding feature of the SAIL Image Decoding Library version 0.9.8. When handling specially crafted .bmp files, an integer overflow may occur. This overflow can lead to a heap-based buffer overflow while reading the image palette, which could potentially allow attackers to execute arbitrary code remotely. Exploitation of this vulnerability relies on the attacker persuading the library to process a malicious file.

References