Vulnerabilities

TI-2026-81159 CVE-2026-117555 · GHSA-88mq-c93j-j2w3

Heap out-of-bounds read in GreycLab CImg BMP loader

LOW 29

CImg through 4.0.6 contains a heap out-of-bounds read vulnerability in the _load_bmp() function of CImg.h caused by an integer overflow in the row byte count.

CVSS 4.0MEDIUM 6.9 Local No auth User interaction EPSS 0.00129 Published 2026-10-27 No fix listed CWE-190

TI-2026-35174 CVE-2026-47667

CImg Library: Uncontrolled Memory Allocation and Memory Leak in `_load_analyze()` via Crafted NIfTI/Analyze Header

HIGH 72

CImg Library is a C++ library for image processing.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00517 Published 2026-07-21 Fixed in 4.0.0 CWE-1284

TI-2026-30477 CVE-2026-42146

CImg Library: Uncontrolled memory allocation via nb_colors field in _load_bmp

MEDIUM 58

CImg Library is a C++ library for image processing.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00182 Published 2026-05-04 No fix listed CWE-789

TI-2026-30475 CVE-2026-42144

CImg Library: Integer overflow in PNM size check bypasses memory guard (_load_pnm)

LOW 26

CImg Library is a C++ library for image processing.

CVSS 3.1MEDIUM 6.1 Local No auth User interaction EPSS 0.00142 Published 2026-05-04 Fixed in 4ca26bc CWE-190

Vulnerabilities

Filters

Heap out-of-bounds read in GreycLab CImg BMP loader

CImg Library: Uncontrolled Memory Allocation and Memory Leak in `_load_analyze()` via Crafted NIfTI/Analyze Header

CImg Library: Uncontrolled memory allocation via nb_colors field in _load_bmp

CImg Library: Integer overflow in PNM size check bypasses memory guard (_load_pnm)