← All advisories

High severity7.8NVD Advisory· Published Mar 15, 2024· Updated Jun 17, 2026

CVE-2024-26540

CVE-2024-26540

Description

A heap-based buffer overflow in Clmg before 3.3.3 can occur via a crafted file to cimg_library::CImg::_load_analyze.

Affected products

3

CImg/CImg2 versions
cpe:2.3:a:cimg:cimg:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:cimg:cimg:*:*:*:*:*:*:*:*range: <3.3.3
- (no CPE)range: <3.3.3
Clmg/Clmgdescription

Patches

Vulnerability mechanics

References

1

github.com/GreycLab/CImg/issues/403nvdExploitIssue TrackingThird Party Advisory

News mentions

0

No linked articles in our index yet.