Vendors / CImg Records 14 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 12
Exploited now CImg records in CISA KEV No CImg vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 70
An issue in cimg.eu Cimg Library v2.9.3 allows an attacker to obtain sensitive information via a crafted JPEG file.
CVSS 3.1 HIGH 8.1· Network · No auth · User interaction · EPSS 0.00688 · Published 2023-09-20 · No fix listed CWE-401
Priority HIGH 69
A heap-based buffer overflow in Clmg before 3.3.3 can occur via a crafted file to cimg_library::CImg<unsigned char>::_load_analyze.
CVSS 3.1 HIGH 7.8· Local · No auth · User interaction · EPSS 0.00314 · Published 2024-03-15 · No fix listed CWE-122
Priority MEDIUM 42
CImg through 2.6.7 has a heap-based buffer overflow in _load_bmp in CImg.h because of erroneous memory allocation for a malformed BMP image.
CVSS 3.0 HIGH 8.8· Network · No auth · User interaction · EPSS 0.01749 · Published 2019-07-31 · No fix listed CWE-787
Priority LOW 38
A flaw was found in CImg in versions prior to 2.9.3.
CVSS 3.1 HIGH 8.1· Network · No auth · User interaction · EPSS 0.01478 · Published 2020-12-03 · No fix listed CWE-190
Priority LOW 37
An issue was discovered in CImg v.220.
CVSS 3.0 HIGH 7.8· Local · No auth · User interaction · EPSS 0.01225 · Published 2018-03-02 · No fix listed CWE-125
Priority LOW 37
An issue was discovered in CImg v.220.
CVSS 3.0 HIGH 7.8· Local · No auth · User interaction · EPSS 0.01225 · Published 2018-03-02 · No fix listed CWE-125
Priority LOW 37
An issue was discovered in CImg v.220.
CVSS 3.0 HIGH 7.8· Local · No auth · User interaction · EPSS 0.01225 · Published 2018-03-02 · No fix listed CWE-125
Priority LOW 37
An issue was discovered in CImg v.220.
CVSS 3.0 HIGH 7.8· Local · No auth · User interaction · EPSS 0.01225 · Published 2018-03-02 · No fix listed CWE-125
Priority LOW 37
An issue was discovered in CImg v.220.
CVSS 3.0 HIGH 7.8· Local · No auth · User interaction · EPSS 0.01329 · Published 2018-03-01 · No fix listed CWE-415
Priority LOW 37
An issue was discovered in CImg v.220.
CVSS 3.0 HIGH 7.8· Local · No auth · User interaction · EPSS 0.01329 · Published 2018-03-01 · No fix listed CWE-125
Priority LOW 36
An issue was discovered in CImg v.220.
CVSS 3.0 HIGH 7.8· Local · No auth · User interaction · EPSS 0.01208 · Published 2018-03-02 · No fix listed CWE-125
Priority LOW 36
An issue was discovered in CImg v.220.
CVSS 3.0 HIGH 7.8· Local · No auth · User interaction · EPSS 0.01086 · Published 2018-03-01 · No fix listed CWE-119
Priority LOW 25
A flaw was found in Clmg, where with the help of a maliciously crafted pandore or bmp file with modified dx and dy header field values it is possible to trick the application into allocating huge buffer sizes like 64 Gig…
CVSS 3.1 MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00423 · Published 2022-08-31 · No fix listed CWE-400
Open these records in search → All records by CVSS severity
1 12 1 0 0
THREATIST.IORead the docs