CVE-2026-117555
GreycLab CImg through 4.0.6 Heap Out-of-Bounds Read via Integer Overflow in _load_bmp()
GreycLab CImg
CVSS
6.9MediumExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
What fixes it
No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.
Description
CImg through 4.0.6 contains a heap out-of-bounds read vulnerability in the _load_bmp() function of CImg.h caused by an integer overflow in the row byte count. Attackers can supply a crafted BMP file with a large header width that wraps dx_bytes, causing crashes or heap memory disclosure into the decoded image.
Text from CVE List
Affected versions 1
- CImgaffected: all versions through 4.0.6CVE List
References 5
- github.com/GreycLab/CImg/commit/b9ed613d9984f9caa1617b97e1db7e429cf14fd5Fixvia CVE List
- vulncheck.com/advisories/greyclab-cimg-through-4.0.6-heap-out-of-bounds-read-via-integer-overflow-in-load-bmpAdvisoryvia CVE List
- github.com/GreycLab/CImg/issues/495Referencevia CVE List
- github.com/GreycLab/CImgReferencevia CVE List
- github.com/GreycLab/CImg/blob/v.4.0.6/CImg.h#L55659Referencevia CVE List