Description
FLTK through 1.4.5 contains a stack-based buffer overflow vulnerability in Fl_BMP_Image::load_bmp_() that allows attackers to corrupt stack memory by supplying an oversized BMP colors_used field. Attackers can craft BMP or ICO files with colors_used above 256 to overflow the 768-byte colormap array, causing crashes or potential code execution.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
fltk fltk
Default version status: unaffected
0 to ≤ 1.4.5affected
pkg:github/fltk/fltkReferences
- https://github.com/fltk/fltk/issues/1632 ↗
- https://github.com/fltk/fltk ↗
- https://github.com/fltk/fltk/commit/3a049d8262dc759cf9737339420e8457e24c0cb1 ↗
- https://github.com/fltk/fltk/blob/release-1.4.5/src/Fl_BMP_Image.cxx#L255-L265 ↗
- https://hackmd.io/@haindpwn/fltk-bmp-image-stack-heap-overflow ↗
- https://www.vulncheck.com/advisories/fltk-through-1.4.5-stack-buffer-overflow-via-fl-bmp-image-colors-used-field ↗