Medium severity · published Aug 31, 2022
CVE-2022-1325
A flaw was found in Clmg, where with the help of a maliciously crafted pandore or bmp file with modified dx and dy header field values it is possible to trick the application into…
5.5
CVSS
0.4%
EPSS
No
On KEV
Description
A flaw was found in Clmg, where with the help of a maliciously crafted pandore or bmp file with modified dx and dy header field values it is possible to trick the application into allocating huge buffer sizes like 64 Gigabyte upon reading the file from disk or from a virtual buffer.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 36% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CI
Cimg · Cimg
before 3.1.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-1325
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-1325
Broken Link
https://access.redhat.com/security/cve/CVE-2022-1325
Exploit
https://bugzilla.redhat.com/show_bug.cgi?id=2074549
Patch
https://github.com/GreycLab/CImg/commit/619cb58dd90b4e03ac68286c70ed98acbefd1c90
Exploit
https://github.com/GreycLab/CImg/issues/343
Patch
https://github.com/GreycLab/CImg/pull/348
Exploit
https://huntr.dev/bounties/a5e4fc45-8f14-4dd1-811b-740fc50c95d2/
More from Cimg
8.8
CVE-2019-13568
CImg through 2.6.7 has a heap-based buffer overflow in _load_bmp in CImg.h because of erroneous memory allocation for a malformed BMP image
8.1
CVE-2023-41484
An issue in cimg.eu Cimg Library v2.9.3 allows an attacker to obtain sensitive information via a crafted JPEG file
8.1
CVE-2020-25693
A flaw was found in CImg in versions prior to 2.9.3
7.8
CVE-2024-26540
A heap-based buffer overflow in Clmg before 3.3.3 can occur via a crafted file to cimg_library::CImg<unsigned char>::_load_analyze
7.8
CVE-2018-7641
An issue was discovered in CImg v.220