GCVE - cpe:2.3:a:cimg:cimg:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:cimg:cimg:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Cimg (`dba50a1e-aeb1-59df-9dbc-d0a0fddf32c8`)
Product	Cimg (`dc00bfd1-a060-5253-bcde-7caf7e3b87b1`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:bitbucket/hariktmcmf/cimg`	purl2cpe	2026-06-01 10:15:26.210480
`pkg:deb/debian/cimg`	purl2cpe	2026-06-01 10:15:26.210483
`pkg:deb/ubuntu/cimg`	purl2cpe	2026-06-01 10:15:26.210486
`pkg:github/dtschump/cimg`	purl2cpe	2026-06-01 10:15:26.210488
`pkg:rpm/fedora/cimg`	purl2cpe	2026-06-01 10:15:26.210491
`pkg:rpm/opensuse/cimg`	purl2cpe	2026-06-01 10:15:26.210494

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-26540`	vulnerable	2026-06-08 06:31:26.480855	Details available A heap-based buffer overflow in Clmg before 3.3.3 can occur via a crafted file to cimg_library::CImg<unsigned char>::_load_analyze. Published: 2024-03-15T00:00:00.000Z Updated: 2024-08-27T17:41:34.734Z Open on db.gcve.eu Reference links https://github.com/GreycLab/CImg/issues/403	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-1325`	vulnerable	2026-06-08 05:39:12.737342	Details available A flaw was found in Clmg, where with the help of a maliciously crafted pandore or bmp file with modified dx and dy header field values it is possible to trick the application into allocating huge buffer sizes like 64 Gigabyte upon reading the file from disk or from a virtual buffer. Published: 2022-08-31T15:33:00.000Z Updated: 2024-08-03T00:03:05.399Z Open on db.gcve.eu Reference links https://bugzilla.redhat.com/show_bug.cgi?id=2074549 https://huntr.dev/bounties/a5e4fc45-8f14-4dd1-811b-740fc50c95d2/ https://github.com/GreycLab/CImg/issues/343 https://github.com/GreycLab/CImg/pull/348 https://github.com/GreycLab/CImg/commit/619cb58dd90b4e03ac68286c70ed98acbefd1c90	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-25693`	vulnerable	2026-06-08 05:22:37.223572	Details available A flaw was found in CImg in versions prior to 2.9.3. Integer overflows leading to heap buffer overflows in load_pnm() can be triggered by a specially crafted input file processed by CImg, which can lead to an impact to application availability or data integrity. Published: 2020-12-03T16:48:26.000Z Updated: 2024-08-04T15:40:36.632Z Open on db.gcve.eu Reference links https://bugzilla.redhat.com/show_bug.cgi?id=1893377 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MJ5Q7NNUPXATTBUKHFKIYYAV5GJDYCZL/ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QZ3NPLYXZWEL7HETIFZVCXEZZ2WYYRWA/ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ERBZALTF7LXN2LZLPGAUSVMV53GHHTUC/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-13568`	vulnerable	2026-06-08 05:12:52.147959	Details available CImg through 2.6.7 has a heap-based buffer overflow in _load_bmp in CImg.h because of erroneous memory allocation for a malformed BMP image. Published: 2019-07-31T14:17:12.000Z Updated: 2024-08-04T23:57:39.390Z Open on db.gcve.eu Reference links http://cimg.eu/ https://github.com/dtschump/CImg https://github.com/dtschump/CImg/commit/ac8003393569aba51048c9d67e1491559877b1d1	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.