Integer Overflow Vulnerability in CImg Library for Image Processing by GreycLab

CVE-2026-42144

What is CVE-2026-42144?

The CImg Library, a C++ library for image manipulation, is affected by an integer overflow vulnerability in the size computation for PNM/PGM/PPM files. When processing crafted image files with large dimensions, the overflow can lead to the allocation of an undersized buffer, which may subsequently result in a heap buffer overflow. This vulnerability poses risks for any applications that utilize CImg to load untrusted image files. A fix was implemented via commit 4ca26bc, patching the affected versions to prevent exploitation.

References