CVE-2026-42144 PUBLISHED

CImg Library: Integer overflow in PNM size check bypasses memory guard (_load_pnm)

Assigner: GitHub_M
Reserved: 24.04.2026 Published: 04.05.2026 Updated: 04.05.2026

CImg Library is a C++ library for image processing. Prior to commit 4ca26bc, there is an integer overflow vulnerability in the WHD size computation inside _load_pnm() that can bypass the memory allocation guard. A crafted PNM/PGM/PPM file with large dimension values causes the overflow to wrap around, allocating an undersized buffer and potentially triggering a heap buffer overflow. Any application using CImg to load untrusted image files is affected. This issue has been patched via commit 4ca26bc.

Metrics

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
CVSS Score: 6.1

Product Status

Vendor GreycLab
Product CImg
Versions
  • Version < 4ca26bce4d8c61fcd1507d5f9401b9fb1222c27d is affected

References

Problem Types

  • CWE-190: Integer Overflow or Wraparound CWE