Live › vulnerability › CVE-2026-117555
Go to dashboardCImg, a C++ image-processing header library, has an integer overflow in its BMP loader (_load_bmp in CImg.h) that wraps the row byte count. A crafted BMP with a large width can make the loader read past a heap buffer, crashing the program or leaking heap memory into the decoded image.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 14:32 UTC. All times on this page are UTC.
Applications that compile CImg.h and decode BMP files supplied by users or other untrusted sources are exposed, since the bad input comes from the file itself. Programs that only load trusted local images, or do not use CImg's BMP loader, can likely skip it. The sources do not say whether a patched CImg release exists.
No product ranges from the sources yet.
grep -rn "CImg.h" . or in the build's include paths.4.0.6 are affected.CImg<T>::load or load_bmp.Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
CImg through 4.0.6 contains a heap out-of-bounds read vulnerability in the _load_bmp() function of CImg.h caused by an integer overflow in the row byte count. Attackers can supply a crafted BMP file with a large header width that wraps dx_bytes, causing crashes or heap memory disclosure into the decoded image.
This page as .md · .json · in your agent: get_signal("CVE-2026-117555")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.