Read the docs

fltk

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

fltk records in CISA KEV

No fltk vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-80932 CVE-2026-116723 · GHSA-64v9-4hfh-jmvh

Stack buffer overflow in FLTK BMP image loader

Priority HIGH 72

FLTK through 1.4.5 contains a stack-based buffer overflow vulnerability in Fl_BMP_Image::load_bmp_() that allows attackers to corrupt stack memory by supplying an oversized BMP colors_used field.

CVSS 4.0HIGH 8.5 Local No auth User interaction EPSS 0.0016 Published 2026-10-26 No fix listed CWE-121
TI-2026-80933 CVE-2026-116724 · GHSA-vc45-5x28-58gf

Heap buffer overflow in FLTK BMP image loader via integer overflow

Priority LOW 38

FLTK through 1.4.5 contains an integer overflow vulnerability in Fl_BMP_Image::load_bmp_() that causes undersized pixel buffer allocation from file-supplied width and height.

CVSS 4.0HIGH 8.5 Local No auth User interaction EPSS 0.00147 Published 2026-10-26 No fix listed CWE-190
Open these records in search →