CImg through 2.6.7 has a heap-based buffer overflow in _load_bmp in CImg.h because of erroneous memory allocation for a malformed BMP image.

Original description

The description as published by the source.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Fix status by distribution

Fixed packages published by each distribution for this CVE

• Debian DEBIAN-CVE-2019-13568 cimg Fixed in: 2.8.4+dfsg-1

References

• package github.com
• patch github.com
• web cimg.eu