CVE-2026-116724
FLTK through 1.4.5 Heap Buffer Overflow via Fl_BMP_Image Integer Overflow
fltk fltk
CVSS
8.5HighExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
What fixes it
No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.
Description
FLTK through 1.4.5 contains an integer overflow vulnerability in Fl_BMP_Image::load_bmp_() that causes undersized pixel buffer allocation from file-supplied width and height. Attackers can supply a crafted BMP or ICO file with large dimensions so row decoding writes file-derived data past the heap buffer, corrupting the application heap.
Text from CVE List
Affected versions 1
- fltkaffected: all versions through 1.4.5CVE List
References 6
- github.com/fltk/fltk/commit/3a049d8262dc759cf9737339420e8457e24c0cb1Fixvia CVE List
- hackmd.io/@haindpwn/fltk-bmp-image-stack-heap-overflowAdvisoryvia CVE List
- vulncheck.com/advisories/fltk-through-1.4.5-heap-buffer-overflow-via-fl-bmp-image-integer-overflowAdvisoryvia CVE List
- github.com/fltk/fltk/issues/1632Referencevia CVE List
- github.com/fltk/fltkReferencevia CVE List
- github.com/fltk/fltk/blob/release-1.4.5/src/Fl_BMP_Image.cxx#L281-L286Referencevia CVE List