{"id":"CVE-2018-7639","aliases":["DEBIAN-CVE-2018-7639","DLA-1934-1","DLA-2421-1","EUVD-2018-19358","GHSA-xvqm-w94f-83x2","MGASA-2018-0438","UBUNTU-CVE-2018-7639"],"status":"published","title":"An issue was discovered in CImg v.220. A heap-based buffer over-read in load_bmp in CImg.h occurs...","description":"An issue was discovered in CImg v.220. A heap-based buffer over-read in load_bmp in CImg.h occurs when loading a crafted bmp image, a different vulnerability than CVE-2018-7588. This is in a \"16 bits colors\" case, aka case 16.","severity":{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01225,"percentile":0.69008,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125"],"published":"2018-03-02T14:00:00Z","modified":"2026-10-23T18:03:58Z","fixes":[{"ecosystem":"Debian:12","package":"cimg","fixed_in":["2.3.6+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"cimg","fixed_in":["2.3.6+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"cimg","fixed_in":["2.3.6+dfsg-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"cimg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.6+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"cimg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.6+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"cimg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.6+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"cimg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.9+dfsg-1+deb8u1"}]}],"versions":["1.5.9+dfsg-1"],"bundled":8},{"source":"osv","ecosystem":"Debian:9","package":"cimg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.9+dfsg-1+deb9u1"}]}],"versions":["1.7.9+dfsg-1"],"bundled":8},{"source":"osv","ecosystem":"Mageia:6","package":"cimg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-1.mga6"}]}],"bundled":8},{"source":"osv","ecosystem":"Mageia:6","package":"gmic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-1.2.mga6"}]}],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"cimg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.6.4+dfsg-1build1","1.6.5+dfsg-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"cimg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.7.9+dfsg-2","1.7.9+dfsg-2build1","1.7.9+dfsg-2ubuntu0.18.04.1","1.7.9+dfsg-2ubuntu0.18.04.2","1.7.9+dfsg-2ubuntu0.18.04.2+esm1"]}],"products":[{"vendor":"cimg","product":"cimg"}],"references":[{"url":"https://github.com/dtschump/CImg/issues/185","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","evidence","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/09/msg00030.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/10/msg00033.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-7639"},{"url":"https://github.com/advisories/GHSA-xvqm-w94f-83x2"},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-7639","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2018-0438.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=23700","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/6Z4EMB7JFEKIYRFRANRNDD7ZIIZP6T4Z/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/OCWBP5ZUZHIZXP7IFUEZIJG7Q3VLJXBV/","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2018-7639","tags":["report"]},{"url":"https://github.com/dtschump/CImg/commit/10af1e8c1ad2a58a0a3342a856bae63e8f257abb","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-7639","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2018-7639","description":"An issue was discovered in CImg v.220. A heap-based buffer over-read in load_bmp in CImg.h occurs when loading a crafted bmp image, a different vulnerability than CVE-2018-7588. This is in a \"16 bits colors\" case, aka case 16.","status":"published","published":"2018-03-02T14:00:00Z","modified":"2024-08-05T06:31:04.986Z","updated_at":"2026-11-02T14:35:10.313768Z"}],"euvd":[{"id":"EUVD-2018-19358","description":"An issue was discovered in CImg v.220. A heap-based buffer over-read in load_bmp in CImg.h occurs when loading a crafted bmp image, a different vulnerability than CVE-2018-7588. This is in a \"16 bits colors\" case, aka case 16.","status":"published","published":"2018-03-02T14:00:00Z","modified":"2024-08-05T06:31:04Z","updated_at":"2026-11-03T02:40:05.186892Z"}],"ghsa":[{"id":"GHSA-xvqm-w94f-83x2","title":"An issue was discovered in CImg v.220. A heap-based buffer over-read in load_bmp in CImg.h occurs...","description":"An issue was discovered in CImg v.220. A heap-based buffer over-read in load_bmp in CImg.h occurs when loading a crafted bmp image, a different vulnerability than CVE-2018-7588. This is in a \"16 bits colors\" case, aka case 16.","status":"published","published":"2022-05-13T01:13:49Z","modified":"2023-02-01T05:04:12Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:50:08.411477Z"}],"nvd":[{"id":"CVE-2018-7639","description":"An issue was discovered in CImg v.220. A heap-based buffer over-read in load_bmp in CImg.h occurs when loading a crafted bmp image, a different vulnerability than CVE-2018-7588. This is in a \"16 bits colors\" case, aka case 16.","status":"published","published":"2018-03-02T14:29:00.313Z","modified":"2026-06-17T02:03:27.57Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:04:23.783914Z"}],"osv":[{"id":"CVE-2018-7639","description":"An issue was discovered in CImg v.220. A heap-based buffer over-read in load_bmp in CImg.h occurs when loading a crafted bmp image, a different vulnerability than CVE-2018-7588. This is in a \"16 bits colors\" case, aka case 16.","status":"published","published":"2018-03-02T14:29:00.313Z","modified":"2026-04-16T06:25:53.061127032Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:09.74357Z"},{"id":"DEBIAN-CVE-2018-7639","description":"An issue was discovered in CImg v.220. A heap-based buffer over-read in load_bmp in CImg.h occurs when loading a crafted bmp image, a different vulnerability than CVE-2018-7588. This is in a \"16 bits colors\" case, aka case 16.","status":"published","published":"2018-03-02T14:29:00.313Z","modified":"2026-10-23T18:03:58.615064881Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:31.170944Z"},{"id":"UBUNTU-CVE-2018-7639","description":"An issue was discovered in CImg v.220. A heap-based buffer over-read in load_bmp in CImg.h occurs when loading a crafted bmp image, a different vulnerability than CVE-2018-7588. This is in a \"16 bits colors\" case, aka case 16.","status":"published","published":"2018-03-02T14:29:00Z","modified":"2026-04-22T12:03:44.182269Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:18.772093Z"},{"id":"DLA-1934-1","title":"cimg - security update","status":"published","published":"2019-09-28T00:00:00Z","modified":"2026-03-09T01:20:04.687239Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"DLA-2421-1","title":"cimg - security update","status":"published","published":"2020-10-30T00:00:00Z","modified":"2026-03-09T01:21:08.655612Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"MGASA-2018-0438","title":"Updated cimg and gmic packages fix security vulnerabilities","description":"Updated cimg and gmic packages fix security vulnerabilities:\n\nAn issue was discovered in CImg v.220. DoS occurs when loading a crafted\nbmp image that triggers an allocation failure in load_bmp in CImg.h\n(CVE-2018-7587).\n\nAn issue was discovered in CImg v.220. A heap-based buffer over-read in\nload_bmp in CImg.h occurs when loading a crafted bmp image (CVE-2018-7588).\n\nAn issue was discovered in CImg v.220. A double free in load_bmp in CImg.h\noccurs when loading a crafted bmp image (CVE-2018-7589).\n\nAn issue was discovered in CImg v.220. A heap-based buffer over-read in\nload_bmp in CImg.h occurs when loading a crafted bmp image. This is in a\n\"16 colors\" case, aka case 4 (CVE-2018-7637).\n\nAn issue was discovered in CImg v.220. A heap-based buffer over-read in\nload_bmp in CImg.h occurs when loading a crafted bmp image. This is in a\n\"256 colors\" case, aka case 8 (CVE-2018-7638).\n\nAn issue was discovered in CImg v.220. A heap-based buffer over-read in\nload_bmp in CImg.h occurs when loading a crafted bmp image. This is in a\n\"16 bits colors\" case, aka case 16 (CVE-2018-7639).\n\nAn issue was discovered in CImg v.220. A heap-based buffer over-read in\nload_bmp in CImg.h occurs when loading a crafted bmp image. This is in a\nMonochrome case, aka case 1 (CVE-2018-7640).\n\nAn issue was discovered in CImg v.220. A heap-based buffer over-read in\nload_bmp in CImg.h occurs when loading a crafted bmp image. This is in a\n\"32 bits colors\" case, aka case 32 (CVE-2018-7641).\n","status":"published","published":"2018-11-03T19:20:21Z","modified":"2026-04-16T06:22:36.18743663Z","updated_at":"2026-11-02T15:49:40.793816Z"}]}}