DEBIAN-CVE-2022-1325

    Dashboard / Vulnerabilities / DEBIAN-CVE-2022-1325

    DEBIAN-CVE-2022-1325

    Published: 31 Aug 2022Last Modified: 1 Sept 2026
    Upstream:
    CVE-2022-1325

    Summary:

    Details: A flaw was found in Clmg, where with the help of a maliciously crafted pandore or bmp file with modified dx and dy header field values it is possible to trick the application into allocating huge buffer sizes like 64 Gigabyte upon reading the file from disk or from a virtual buffer.

    References: https://security-tracker.debian.org/tracker/CVE-2022-1325

    Affected packages

    Package

    Name: cimg

    Purl: pkg:deb/debian/cimg?arch=source&distro=bookworm

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -3.1.6+dfsg-1

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    DEBIAN-CVE-2022-1325 | CVE-DB