Description
An issue in the imlib_free_image_and_decache function of imlib2 v1.9.1 allows attackers to cause a heap buffer overflow via parsing a crafted image.
References (2)
Core 2
Core References
Exploit, Issue Tracking, Third Party Advisory
https://git.enlightenment.org/old/legacy-imlib2/issues/20
Exploit, Issue Tracking, Third Party Advisory
https://github.com/derf/feh/issues/711
Scores
CVSS v3
8.8
EPSS
0.0011
EPSS Percentile
28.9%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
no
Technical Impact
total
Details
CWE
CWE-122
CWE-787
Status
published
Products (1)
enlightenment/imlib2
1.9.1
Published
Feb 09, 2024
Tracked Since
Feb 18, 2026