CVE-2018-7641: High severity CImg cimg vulnerability
Published Mar 2, 2018
·Updated
An issue was discovered in CImg v.220. A heap-based buffer over-read in loadbmp in CImg.h occurs when loading a crafted bmp image, a different vulnerability than CVE-2018-7588. This is in a "32 bits colors" case, aka case 32.
Affected Software
1 affected component
CImg cimg=.220
Event History
Mar 2, 2018
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Data Sourced
via NVD·02:29 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2018-7641?
CVE-2018-7641 is a vulnerability in CImg v.220 that allows for a heap-based buffer over-read when loading a crafted bmp image.
2
What is the severity of CVE-2018-7641?
The severity of CVE-2018-7641 is high with a severity value of 7.8.
3
How does CVE-2018-7641 occur?
CVE-2018-7641 occurs in CImg v.220 when loading a crafted bmp image that triggers a heap-based buffer over-read.
4
Which software version is affected by CVE-2018-7641?
CImg v.220 is affected by CVE-2018-7641.
5
Is there a fix available for CVE-2018-7641?
Yes, a fix for CVE-2018-7641 is available. Please refer to the provided references for more information.