VYPR

CImg Library

by CImg Library

Source repositories

CVEs (2)

  • CVE-2018-25204HigMar 26, 2026
    risk 0.53cvss 8.2epss 0.01

    Library CMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to bypass authentication by injecting SQL code through the username parameter. Attackers can send POST requests to the admin login endpoint with boolean-based blind SQL injection…

  • CVE-2026-47667HigJul 21, 2026
    risk 0.42cvss 7.5epss 0.00

    CImg Library is a C++ library for image processing. Prior to version 4.0.0 in `_load_analyze()`, the header_size field is read as an `unsigned int` from the first 4 bytes of an Analyze/NIfTI file and passed directly to `new unsigned char[header_size]` without being bounded…