CVE-2018-7638: High severity CImg cimg vulnerability
Published Mar 2, 2018
·Updated
An issue was discovered in CImg v.220. A heap-based buffer over-read in loadbmp in CImg.h occurs when loading a crafted bmp image, a different vulnerability than CVE-2018-7588. This is in a "256 colors" case, aka case 8.
Affected Software
1 affected component
CImg cimg=.220
Event History
Mar 2, 2018
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Data Sourced
via NVD·02:29 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2018-7638?
CVE-2018-7638 is a vulnerability in CImg v.220 that allows for a heap-based buffer over-read when loading a crafted bmp image.
2
What is the severity of CVE-2018-7638?
CVE-2018-7638 has a severity rating of 7.8 (high).
3
How does CVE-2018-7638 occur?
CVE-2018-7638 occurs in the '256 colors' case of the load_bmp function in CImg.h.
4
What is the impact of CVE-2018-7638?
CVE-2018-7638 can result in a heap-based buffer over-read, potentially leading to information disclosure or a denial of service.
5
How can CVE-2018-7638 be fixed?
To fix CVE-2018-7638, update CImg to a version that is not affected by the vulnerability.