CImg records
14 published records for vendor cimg.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 85.7%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-125 Out-of-bounds Read6
- CWE-122 Heap-based Buffer Overflow1
- CWE-190 Integer Overflow or Wraparound1
- CWE-400 Uncontrolled Resource Consumption1
- CWE-401 Missing Release of Memory after Effective Lifetime1
- CWE-415 Double Free1
The weakness classes this vendor ships most often: where to look.
CWEAll records
14 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2019-1010174Proof of concept | CImg The CImg Library v.2.3.3 and earlier is affected by: command injection.cimg · cimg library · CWE-77 | Critical9.8 | — | 4.9% | Jul 25, 2019 |
36Monitor | CVE-2019-13568No exploit | CImg through 2.6.7 has a heap-based buffer overflow in _load_bmp in CImg.h because of erroneous memory allocation for a malformed BMP image.cimg · cimg · CWE-787 | High8.8 | — | 1.7% | Jul 31, 2019 |
32Monitor | CVE-2020-25693No exploit | A flaw was found in CImg in versions prior to 2.9.3.cimg · cimg · CWE-190 | High8.1 | — | 1.4% | Dec 3, 2020 |
32Monitor | CVE-2023-41484No exploit | An issue in cimg.eu Cimg Library v2.9.3 allows an attacker to obtain sensitive information via a crafted JPEG file.cimg · cimg · CWE-401 | High8.1 | — | 0.6% | Sep 20, 2023 |
31Monitor | CVE-2018-7588No exploit | An issue was discovered in CImg v.220.cimg · cimg · CWE-125 | High7.8 | — | 1.3% | Mar 1, 2018 |
31Monitor | CVE-2018-7589No exploit | An issue was discovered in CImg v.220.cimg · cimg · CWE-415 | High7.8 | — | 1.3% | Mar 1, 2018 |
31Monitor | CVE-2018-7638No exploit | An issue was discovered in CImg v.220.cimg · cimg · CWE-125 | High7.8 | — | 1.2% | Mar 2, 2018 |
31Monitor | CVE-2018-7637No exploit | An issue was discovered in CImg v.220.cimg · cimg · CWE-125 | High7.8 | — | 1.2% | Mar 2, 2018 |
31Monitor | CVE-2018-7641No exploit | An issue was discovered in CImg v.220.cimg · cimg · CWE-125 | High7.8 | — | 1.2% | Mar 2, 2018 |
31Monitor | CVE-2018-7639No exploit | An issue was discovered in CImg v.220.cimg · cimg · CWE-125 | High7.8 | — | 1.2% | Mar 2, 2018 |
31Monitor | CVE-2018-7640No exploit | An issue was discovered in CImg v.220.cimg · cimg · CWE-125 | High7.8 | — | 1.2% | Mar 2, 2018 |
31Monitor | CVE-2018-7587No exploit | An issue was discovered in CImg v.220.cimg · cimg · CWE-119 | High7.8 | — | 1.0% | Mar 1, 2018 |
31Monitor | CVE-2024-26540No exploit | A heap-based buffer overflow in Clmg before 3.3.3 can occur via a crafted file to cimg_library::CImg<unsigned char>::_load_analyze.cimg · cimg · CWE-122 | High7.8 | — | 0.3% | Mar 14, 2024 |
22Monitor | CVE-2022-1325No exploit | A flaw was found in Clmg, where with the help of a maliciously crafted pandore or bmp file with modified dx and dy header field values it iscimg · cimg · CWE-400 | Medium5.5 | — | 0.4% | Aug 31, 2022 |
- CVE-2019-101017440Plan
CImg The CImg Library v.2.3.3 and earlier is affected by: command injection.
CriticalCVSS 9.8Proof of conceptEPSS 4%cimg · cimg libraryJul 25, 2019
- CVE-2019-1356836Monitor
CImg through 2.6.7 has a heap-based buffer overflow in _load_bmp in CImg.h because of erroneous memory allocation for a malformed BMP image.
HighCVSS 8.8No exploitEPSS 1%cimg · cimgJul 31, 2019
- CVE-2020-2569332Monitor
A flaw was found in CImg in versions prior to 2.9.3.
HighCVSS 8.1No exploitEPSS 1%cimg · cimgDec 3, 2020
- CVE-2023-4148432Monitor
An issue in cimg.eu Cimg Library v2.9.3 allows an attacker to obtain sensitive information via a crafted JPEG file.
HighCVSS 8.1No exploitEPSS 0%cimg · cimgSep 20, 2023
- CVE-2018-758831Monitor
An issue was discovered in CImg v.220.
HighCVSS 7.8No exploitEPSS 1%cimg · cimgMar 1, 2018
- CVE-2018-758931Monitor
An issue was discovered in CImg v.220.
HighCVSS 7.8No exploitEPSS 1%cimg · cimgMar 1, 2018
- CVE-2018-763831Monitor
An issue was discovered in CImg v.220.
HighCVSS 7.8No exploitEPSS 1%cimg · cimgMar 2, 2018
- CVE-2018-763731Monitor
An issue was discovered in CImg v.220.
HighCVSS 7.8No exploitEPSS 1%cimg · cimgMar 2, 2018
- CVE-2018-764131Monitor
An issue was discovered in CImg v.220.
HighCVSS 7.8No exploitEPSS 1%cimg · cimgMar 2, 2018
- CVE-2018-763931Monitor
An issue was discovered in CImg v.220.
HighCVSS 7.8No exploitEPSS 1%cimg · cimgMar 2, 2018
- CVE-2018-764031Monitor
An issue was discovered in CImg v.220.
HighCVSS 7.8No exploitEPSS 1%cimg · cimgMar 2, 2018
- CVE-2018-758731Monitor
An issue was discovered in CImg v.220.
HighCVSS 7.8No exploitEPSS 1%cimg · cimgMar 1, 2018
- CVE-2024-2654031Monitor
A heap-based buffer overflow in Clmg before 3.3.3 can occur via a crafted file to cimg_library::CImg<unsigned char>::_load_analyze.
HighCVSS 7.8No exploitEPSS 0%cimg · cimgMar 14, 2024
- CVE-2022-132522Monitor
A flaw was found in Clmg, where with the help of a maliciously crafted pandore or bmp file with modified dx and dy header field values it is
MediumCVSS 5.5No exploitEPSS 0%cimg · cimgAug 31, 2022