{"schema":"threatline.record/2","record":{"id":"CVE-2026-116724","aliases":[],"summary":"FLTK through 1.4.5 Heap Buffer Overflow via Fl_BMP_Image Integer Overflow","details":"FLTK through 1.4.5 contains an integer overflow vulnerability in Fl_BMP_Image::load_bmp_() that causes undersized pixel buffer allocation from file-supplied width and height. Attackers can supply a crafted BMP or ICO file with large dimensions so row decoding writes file-derived data past the heap buffer, corrupting the application heap.","categories":["Unclassified"],"product":"fltk","vendor":"fltk","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-116724","source_modified_at":"2026-10-26T21:52:28.153Z","fetched_at":"2026-10-26T23:45:56.352924Z","product":"fltk","vendor":"fltk","versions":[{"version":"0","status":"affected","versionType":"custom","lessThanOrEqual":"1.4.5"}],"defaultStatus":"unaffected"}],"fixed_versions":[],"cvss":8.5,"severity":"High","kev":{"listed":false},"epss":{"probability":null,"percentile":null,"score_date":null},"published_at":"2026-10-26T21:52:28.153Z","modified_at":"2026-10-26T21:52:28.153Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-116724","fetched_at":"2026-10-26T23:45:56.352924Z","source_modified_at":"2026-10-26T21:52:28.153Z"}],"sources":["CVE List"],"references":[{"source":"CVE List","url":"https://github.com/fltk/fltk/issues/1632","tags":["issue-tracking"]},{"source":"CVE List","url":"https://github.com/fltk/fltk","tags":["product"]},{"source":"CVE List","url":"https://github.com/fltk/fltk/commit/3a049d8262dc759cf9737339420e8457e24c0cb1","tags":["patch"]},{"source":"CVE List","url":"https://github.com/fltk/fltk/blob/release-1.4.5/src/Fl_BMP_Image.cxx#L281-L286","tags":["technical-description"]},{"source":"CVE List","url":"https://hackmd.io/@haindpwn/fltk-bmp-image-stack-heap-overflow","tags":["third-party-advisory"]},{"source":"CVE List","url":"https://www.vulncheck.com/advisories/fltk-through-1.4.5-heap-buffer-overflow-via-fl-bmp-image-integer-overflow","tags":["third-party-advisory"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2026-10-26T21:52:28.153Z","content_hash":"52c4babe4701a700c294b7cd8c2f367945b913b12814a6eff6ca04f6ea480840"}}