CVE-2026-42146

Published: May 4, 2026Modified: Jun 17, 2026Deferred

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: security-advisories@github.com (Secondary)

Description

CImg Library is a C++ library for image processing. Prior to commit c3aacf5, the nb_colors field read from the BMP file header is used directly to compute an allocation size without validating it against the remaining file size. A crafted BMP file with a large nb_colors value triggers an out-of-memory condition, crashing any application that uses CImg to load untrusted BMP files. This issue has been patched via commit c3aacf5.

Related CWEs

CWE-789

Memory Allocation with Excessive Size Value

The product allocates memory based on an untrusted, large size value, but it does not ensure that the size is within expected limits, allowing arbitrary amounts of memory to be allocated.

References (5)

https://github.com/GreycLab/CImg/commit/c3aacf5b96ac1e54b7af1957c6737dbf3949f6d3

Source: security-advisories@github.com

https://github.com/GreycLab/CImg/issues/477

Source: security-advisories@github.com

https://github.com/GreycLab/CImg/releases/tag/v.3.7.5

Source: security-advisories@github.com

https://github.com/GreycLab/CImg/security/advisories/GHSA-g54r-qmgx-c6fv

Source: security-advisories@github.com

https://github.com/GreycLab/CImg/issues/477

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Timeline

No history available yet.