CVE-2018-7640: High severity CImg cimg vulnerability
Published Mar 2, 2018
·Updated
An issue was discovered in CImg v.220. A heap-based buffer over-read in loadbmp in CImg.h occurs when loading a crafted bmp image, a different vulnerability than CVE-2018-7588. This is in a Monochrome case, aka case 1.
Affected Software
1 affected component
CImg cimg=.220
Event History
Mar 2, 2018
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Data Sourced
via NVD·02:29 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2018-7640?
The severity of CVE-2018-7640 is high with a CVSS score of 7.8.
2
How does CVE-2018-7640 occur?
CVE-2018-7640 occurs due to a heap-based buffer over-read in load_bmp in CImg.h when loading a crafted bmp image.
3
What software versions are affected by CVE-2018-7640?
CImg v.220 is affected by CVE-2018-7640.
4
Are there any fixes available for CVE-2018-7640?
Yes, you can refer to the provided references for any available fixes for CVE-2018-7640.
5
What is the Common Weakness Enumeration (CWE) ID for CVE-2018-7640?
CVE-2018-7640 is associated with CWE-125, which is the Common Weakness Enumeration ID for Out-of-bounds Read.