CVE-2020-25693: Integer Overflow
A flaw was found in CImg in versions prior to 2.9.3. Integer overflows leading to heap buffer overflows in loadpnm() can be triggered by a specially crafted input file processed by CImg, which can lead to an impact to application availability or data integrity.
Other sources
The CImg.h image library uses an unsafe pattern that is prone to integer overflows to calculate the required heap buffer allocation size. The resulting small heap buffers can be trivially overwritten by a malformed image input. This has been demonstrated at least with the loadpnm() image parsing function.
References: https://github.com/dtschump/CImg/pull/295 https://bugs.launchpad.net/ubuntu/+source/cimg/+bug/1900983
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2020-25693?
CVE-2020-25693 is a vulnerability in CImg prior to version 2.9.3 that allows integer overflows leading to heap buffer overflows.
What is the severity of CVE-2020-25693?
CVE-2020-25693 has a severity rating of 8.1 (high).
How does CVE-2020-25693 impact application availability or data integrity?
CVE-2020-25693 can impact application availability or data integrity due to heap buffer overflows caused by integer overflows in CImg.
Which software versions are affected by CVE-2020-25693?
Versions of CImg prior to 2.9.3 are affected by CVE-2020-25693.
How can I fix CVE-2020-25693?
To fix CVE-2020-25693, update CImg to version 2.9.3 or higher.