CVE-2025-32468: Integer Overflow
A memory corruption vulnerability exists in the BMPv3 Image Decoding functionality of the SAIL Image Decoding Library v0.9.8. When loading a specially crafted .bmp file, an integer overflow can be made to occur when calculating the stride for decoding. Afterwards, this will cause a heap-based buffer to overflow when decoding the image which can lead to remote code execution. An attacker will need to convince the library to read a file to trigger this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-32468?
CVE-2025-32468 is considered a high severity vulnerability due to the potential for memory corruption and arbitrary code execution.
How do I fix CVE-2025-32468?
To fix CVE-2025-32468, you should update to the latest version of the SAIL Image Decoding Library that addresses this vulnerability.
What are the potential impacts of CVE-2025-32468?
The potential impacts of CVE-2025-32468 include memory corruption, crashes, and possible remote code execution if exploited.
Which versions of SAIL Image Decoding Library are affected by CVE-2025-32468?
CVE-2025-32468 affects version 0.9.8 of the SAIL Image Decoding Library.
How can CVE-2025-32468 be exploited?
CVE-2025-32468 can be exploited by loading a specially crafted .bmp file that triggers an integer overflow in the decoding process.