VYPR

Cimg Library

by CImg

Source repositories

CVEs (3)

  • CVE-2019-1010174CriJul 25, 2019
    risk 0.64cvss 9.8epss 0.05

    CImg The CImg Library v.2.3.3 and earlier is affected by: command injection. The impact is: RCE. The component is: load_network() function. The attack vector is: Loading an image from a user-controllable url can lead to command injection, because no string sanitization is done…

  • CVE-2026-42144MedMay 4, 2026
    risk 0.33cvss 6.1epss 0.00

    CImg Library is a C++ library for image processing. Prior to commit 4ca26bc, there is an integer overflow vulnerability in the W*H*D size computation inside _load_pnm() that can bypass the memory allocation guard. A crafted PNM/PGM/PPM file with large dimension values causes the…

  • CVE-2026-42146MedMay 4, 2026
    risk 0.29cvss 5.5epss 0.00

    CImg Library is a C++ library for image processing. Prior to commit c3aacf5, the nb_colors field read from the BMP file header is used directly to compute an allocation size without validating it against the remaining file size. A crafted BMP file with a large nb_colors value…