Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -3 articles for you...
172
security advisorydenial of servicebuffer overflowUbuntu 22.04 LTS: 7437-1 critical: cimg buffer overflow and DoS
Several security issues were fixed in CImg.. ========================================================================== Ubuntu Security Notice USN-7437-1 April 15, 2025 cimg vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 24.10 - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS - Ubuntu 18.04 LTS Summary: Several security issues were fixed in CImg. Software Description: - cimg: powerful image processing library Details: It was discovered that the CImg library did not properly check the size of images before loading them. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 22.04 LTS. (CVE-2022-1325) It was discovered that the CImg library did not correctly handle certain memory operations, which could lead to a buffer overflow. An attacker could possibly use this issue to execute arbitrary code or cause a denial of service. (CVE-2024-26540) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 24.10 cimg-dev 3.2.1+dfsg-1ubuntu0.24.10.1 Ubuntu 24.04 LTS cimg-dev 3.2.1+dfsg-1ubuntu0.24.04.1~esm1 Available with Ubuntu Pro Ubuntu 22.04 LTS cimg-dev 2.9.4+dfsg-3ubuntu0.1~esm1 Available with Ubuntu Pro Ubuntu 18.04 LTS cimg-dev 1.7.9+dfsg-2ubuntu0.18.04.2+esm1 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-7437-1 CVE-2022-1325, CVE-2024-26540 Package Information: https://launchpad.net/ubuntu/+source/cimg/3.2.1+dfsg-1ubuntu0.24.10.1 . Multiple vulnerabilities addressed in CImg library for Ubuntu, resolving buffer overflow and denial-of-service concerns.. Ubuntu CImg security update, buffer overflow fix, denial of service patch, CImg vulnerabilities. . Severity: Critical. LinuxSecurity.com Team
Apr 15, 2025
•Critical
Ubuntu
198
security advisorycode executionpackage updateArch Linux: ASA-202012-2 Medium: CImg Arbitrary Code Execution
The package cimg before version 2.9.4-1 is vulnerable to arbitrary code execution. . Arch Linux Security Advisory ASA-202012-2 ======================================== Severity: Medium Date : 2020-12-05 CVE-ID : CVE-2020-25693 Package : cimg Type : arbitrary code execution Remote : No Link : https://security.archlinux.org/AVG-1318 Summary ====== The package cimg before version 2.9.4-1 is vulnerable to arbitrary code execution. Resolution ========= Upgrade to 2.9.4-1. # pacman -Syu "cimg> =2.9.4-1" The problem has been fixed upstream in version 2.9.4. Workaround ========= None. Description ========== A flaw was found in CImg in versions prior to 2.9.3. Integer overflows leading to heap buffer overflows in load_pnm() can be triggered by a specially crafted input file processed by CImg, which can lead to an impact to application availability or data integrity. Impact ===== An attacker might be able to execute arbitrary code via a crafted PNM file. References ========= https://github.com/GreycLab/CImg/pull/295 https://github.com/GreycLab/CImg/commit/7db6d08355d09414d407e26aac10bb5825343e3a https://security.archlinux.org/CVE-2020-25693 . Arch Linux Security Advisory ASA-202012-2 outlines an arbitrary code execution issue in cimg versions before 2.9.4-1.. Arch Linux, CImg, Code Execution, Security Advisory, Arbitrary Execution. . Severity: Medium. LinuxSecurity.com Team
Dec 09, 2020
•Medium
ArchLinux
197
security advisorysecurity updatebuffer overflowDebian Security Update: DLA-2462-1 Fix for CImg Buffer Overflow Issue
Multiple heap buffer overflows have been fixed in CImg, a C++ toolkit to load, save, process and display images. For Debian 9 stretch, this problem has been fixed in version . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-2462-1
Nov 22, 2020
•Important
Debian LTS
197
security advisorydebiancommand injectionDebian 9: DLA-2421-1 Moderate: cimg Command Injection & Memory Issues
Several issues have been found in cimg, a powerful image processing library. . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-2421-1
Oct 30, 2020
•Important
Debian LTS
197
security advisoryupdatebuffer overflowDebian 8: DLA-1934-1 Critical: Cimg Command Injection Risk
Several issues have been found in cimg, a powerful image processing library. . Package : cimg Version : 1.5.9+dfsg-1+deb8u1 CVE ID : CVE-2018-7588 CVE-2018-7589 CVE-2018-7637 CVE-2018-7638 CVE-2018-7639 CVE-2018-7640 CVE-2018-7641 CVE-2019-1010174 Several issues have been found in cimg, a powerful image processing library. CVE-2019-1010174 is related to a missing string sanitization on URLs, which might result in a command injection when loading a special crafted image. The other CVEs are about heap-based buffer over-reads or double frees when loading an image. For Debian 8 "Jessie", these problems have been fixed in version 1.5.9+dfsg-1+deb8u1. We recommend that you upgrade your cimg packages. Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Uncover essential enhancements for cimg within Debian LTS aimed at mitigating command injection vulnerabilities and rectifying buffer overflow problems.. Debian LTS, cimg security, image processing library, command injection, buffer overflow. . Severity: Critical. LinuxSecurity.com Team
Sep 28, 2019
•Critical
Debian LTS
203
security advisorydenial of servicebuffer overflowMageia 6: 2018-0438 Moderate: cimg and gmic Buffer Overflow DoS
Updated cimg and gmic packages fix security vulnerabilities: An issue was discovered in CImg v.220. DoS occurs when loading a crafted bmp image that triggers an allocation failure in load_bmp in CImg.h (CVE-2018-7587). . MGASA-2018-0438 - Updated cimg and gmic packages fix security vulnerabilities Publication date: 03 Nov 2018 URL: https://advisories.mageia.org/MGASA-2018-0438.html Type: security Affected Mageia releases: 6 CVE: CVE-2018-7587, CVE-2018-7588, CVE-2018-7589, CVE-2018-7637, CVE-2018-7638, CVE-2018-7639, CVE-2018-7640, CVE-2018-7641 Updated cimg and gmic packages fix security vulnerabilities: An issue was discovered in CImg v.220. DoS occurs when loading a crafted bmp image that triggers an allocation failure in load_bmp in CImg.h (CVE-2018-7587). An issue was discovered in CImg v.220. A heap-based buffer over-read in load_bmp in CImg.h occurs when loading a crafted bmp image (CVE-2018-7588). An issue was discovered in CImg v.220. A double free in load_bmp in CImg.h occurs when loading a crafted bmp image (CVE-2018-7589). An issue was discovered in CImg v.220. A heap-based buffer over-read in load_bmp in CImg.h occurs when loading a crafted bmp image. This is in a "16 colors" case, aka case 4 (CVE-2018-7637). An issue was discovered in CImg v.220. A heap-based buffer over-read in load_bmp in CImg.h occurs when loading a crafted bmp image. This is in a "256 colors" case, aka case 8 (CVE-2018-7638). An issue was discovered in CImg v.220. A heap-based buffer over-read in load_bmp in CImg.h occurs when loading a crafted bmp image. This is in a "16 bits colors" case, aka case 16 (CVE-2018-7639). An issue was discovered in CImg v.220. A heap-based buffer over-read in load_bmp in CImg.h occurs when loading a crafted bmp image. This is in a Monochrome case, aka case 1 (CVE-2018-7640). An issue was discovered in CImg v.220. A heap-based buffer over-read in load_bmp in CImg.h occurs when loading a crafted bmp image. This is in a "32 bits colors" case, aka case32 (CVE-2018-7641). References: - https://bugs.mageia.org/show_bug.cgi?id=23700 - https://lists.fedoraproject.org/archives/list/
Nov 03, 2018
Mageia
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!