Shodan
Maps
Images
Monitor
Developer
More...
Dashboard
View Api Docs
Vulnerabilities
By Date
Known Exploited
Advanced Search
Vulnerable Software
Vendors
Products
Vulnerability Details CVE-2018-7588
An issue was discovered in CImg v.220. A heap-based buffer over-read in load_bmp in CImg.h occurs when loading a crafted bmp image.
Exploit prediction scoring system (EPSS) score
EPSS Score
0.003
EPSS Ranking
53.5%
CVSS Severity
CVSS v3 Score
7.8
CVSS v2 Score
6.8
References
https://github.com/dtschump/CImg/issues/183
https://github.com/xiaoqx/pocs/tree/master/cimg
https://lists.debian.org/debian-lts-announce/2019/09/msg00030.html
https://lists.debian.org/debian-lts-announce/2020/10/msg00033.html
https://usn.ubuntu.com/4039-1/
https://github.com/dtschump/CImg/issues/183
https://github.com/xiaoqx/pocs/tree/master/cimg
https://lists.debian.org/debian-lts-announce/2019/09/msg00030.html
https://lists.debian.org/debian-lts-announce/2020/10/msg00033.html
https://usn.ubuntu.com/4039-1/
Products affected by CVE-2018-7588
Cimg
»
Cimg
»
Version:
.220
cpe:2.3:a:cimg:cimg:.220
Products
Monitor
Search Engine
Developer API
Maps
Bulk Data
Images
Snippets
Pricing
Membership
API Subscriptions
Enterprise
Contact Us
support@shodan.io
Shodan ® - All rights reserved