CVE-2018-7637: High severity CImg cimg vulnerability
Published Mar 2, 2018
·Updated
An issue was discovered in CImg v.220. A heap-based buffer over-read in loadbmp in CImg.h occurs when loading a crafted bmp image, a different vulnerability than CVE-2018-7588. This is in a "16 colors" case, aka case 4.
Affected Software
1 affected component
CImg cimg=.220
Event History
Mar 2, 2018
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Data Sourced
via NVD·02:29 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2018-7637.
2
What is the severity of CVE-2018-7637?
The severity of CVE-2018-7637 is high with a CVSS score of 7.8.
3
What is the affected software version of CVE-2018-7637?
The affected software version of CVE-2018-7637 is CImg v.220.
4
How does the vulnerability in CVE-2018-7637 occur?
The vulnerability in CVE-2018-7637 occurs due to a heap-based buffer over-read in the load_bmp function in CImg.h when loading a crafted bmp image.
5
Is there any fix available for CVE-2018-7637?
Yes, there are fixes available for CVE-2018-7637. Please refer to the provided references for more information.