Description
FLTK through 1.4.5 contains an integer overflow vulnerability in Fl_BMP_Image::load_bmp_() that causes undersized pixel buffer allocation from file-supplied width and height. Attackers can supply a crafted BMP or ICO file with large dimensions so row decoding writes file-derived data past the heap buffer, corrupting the application heap.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
fltk fltk
Default version status: unaffected
0 to ≤ 1.4.5affected
pkg:github/fltk/fltkReferences
- https://github.com/fltk/fltk/issues/1632 ↗
- https://github.com/fltk/fltk ↗
- https://github.com/fltk/fltk/commit/3a049d8262dc759cf9737339420e8457e24c0cb1 ↗
- https://github.com/fltk/fltk/blob/release-1.4.5/src/Fl_BMP_Image.cxx#L281-L286 ↗
- https://hackmd.io/@haindpwn/fltk-bmp-image-stack-heap-overflow ↗
- https://www.vulncheck.com/advisories/fltk-through-1.4.5-heap-buffer-overflow-via-fl-bmp-image-integer-overflow ↗