CVE-2018-7639: High severity CImg cimg vulnerability
Published Mar 2, 2018
·Updated
An issue was discovered in CImg v.220. A heap-based buffer over-read in loadbmp in CImg.h occurs when loading a crafted bmp image, a different vulnerability than CVE-2018-7588. This is in a "16 bits colors" case, aka case 16.
Affected Software
1 affected component
CImg cimg=.220
Event History
Mar 2, 2018
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Data Sourced
via NVD·02:29 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2018-7639?
CVE-2018-7639 is a vulnerability discovered in CImg v.220 that involves a heap-based buffer over-read in the load_bmp function.
2
How does CVE-2018-7639 occur?
CVE-2018-7639 occurs when loading a crafted bmp image in the "16 bits colors" case.
3
What is the severity of CVE-2018-7639?
The severity of CVE-2018-7639 is rated as high with a CVSS score of 7.8.
4
Which software versions are affected by CVE-2018-7639?
The affected software version of CVE-2018-7639 is CImg v.220.
5
How can CVE-2018-7639 be fixed?
To fix CVE-2018-7639, it is recommended to update to a patched version of CImg.