High · 8.8 CVE-2024-25447 EUVD-2024-22776GHSA-m7x8-rvvc-g243

An issue in the imlib_load_image_with_error_return function of imlib2 v1.9.1 allows attackers to cause a heap buffer overflow via parsing a…

Published Feb 9, 2024 · Updated May 15, 2025 · Assigned by mitre

Package: imlib2 Package: imlib2 Ecosystem: Debian Ecosystem: Ubuntu

Description

An issue in the imlib_load_image_with_error_return function of imlib2 v1.9.1 allows attackers to cause a heap buffer overflow via parsing a crafted image.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 14	imlib2	1.10.0-2	—
Debian 13	imlib2	1.10.0-2	—
Debian 12	imlib2	1.10.0-2	—

Ubuntu