Skip to content
OpenAdvisories
Unscored USN-4039-1 3 CVEs

CImg vulnerabilities

Published Jun 26, 2019 · Updated Apr 27, 2026

Ecosystem: Ubuntu

Summary

It was discovered that allocation failures could occur in CImg when loading
crafted bmp images. An attacker could possibly use this issue to cause a
denial of service. (CVE-2018-7587)

It was discovered that a heap-based buffer over-read existed in CImg when
loading crafted bmp images. An attacker could possibly use this issue to
execute arbitrary code. (CVE-2018-7588)

It was discovered that a double free existed in CImg when loading crafted
bmp images. An attacker could possibly use this issue to execute arbitrary
code. (CVE-2018-7589)

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 18.04 LTS 18.04:LTS cimg 1.7.9+dfsg-2ubuntu0.18.04.1

Vulnerabilities 3

  • Unscored —
    CVE-2018-7587

    An issue was discovered in CImg v.220. DoS occurs when loading a crafted bmp image that triggers an allocation failure …

    cimg cimg Debian Ubuntu
  • Unscored —
    CVE-2018-7588

    An issue was discovered in CImg v.220. A heap-based buffer over-read in load_bmp in CImg.h occurs when loading a crafte…

    cimg cimg Debian Ubuntu
  • Unscored —
    CVE-2018-7589

    An issue was discovered in CImg v.220. A double free in load_bmp in CImg.h occurs when loading a crafted bmp image.

    cimg cimg Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2018-7587
  • report
    https://ubuntu.com/security/CVE-2018-7588
  • report
    https://ubuntu.com/security/CVE-2018-7589