CVE-2018-7587

HIGH

CImg v.220 - Denial of Service via Crafted BMP Image Allocation Failure

Title source: llm

An issue was discovered in CImg v.220. DoS occurs when loading a crafted bmp image that triggers an allocation failure in load_bmp in CImg.h.

Core 2

Core References

Exploit, Third Party Advisory x_refsource_misc

Vendor Advisory vendor-advisory x_refsource_ubuntu

CVSS v3 7.8

EPSS 0.0112

EPSS Percentile 61.7%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

CWE-119

Status published

Products (1)

cimg/cimg .220

Published Mar 01, 2018

Tracked Since Feb 18, 2026