CVE-2018-7638
CVE-2018-7638
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An issue was discovered in CImg v.220. A heap-based buffer over-read in load_bmp in CImg.h occurs when loading a crafted bmp image, a different vulnerability than CVE-2018-7588. This is in a "256 colors" case, aka case 8.
CVSS 7.8 · High · EPSS 1.2% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
cimg Debian:12
- Affected ranges
- ECOSYSTEM: < 2.3.6+dfsg-1
Update to 2.3.6+dfsg-1
cimg Debian:13
- Affected ranges
- ECOSYSTEM: < 2.3.6+dfsg-1
Update to 2.3.6+dfsg-1
cimg Debian:14
- Affected ranges
- ECOSYSTEM: < 2.3.6+dfsg-1
Update to 2.3.6+dfsg-1
cimg Ubuntu:16.04:LTS
- Versions
- 1.6.4+dfsg-1build1
- 1.6.5+dfsg-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
cimg Ubuntu:Pro:18.04:LTS
- Versions
- 1.7.9+dfsg-2
- 1.7.9+dfsg-2build1
- 1.7.9+dfsg-2ubuntu0.18.04.1
- 1.7.9+dfsg-2ubuntu0.18.04.2
- 1.7.9+dfsg-2ubuntu0.18.04.2+esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published