CVE Catalog

CVE-2016-4024

Critical
Published: Translated: NVD NIST

Summary

Integer overflow in imlib2 before version 1.4.9 on 32-bit platforms allows remote attackers to execute arbitrary code via large dimensions in an image, leading to an out-of-bounds heap memory write operation.

Risk Assessment

Attackers can exploit this vulnerability to execute arbitrary code remotely, posing a significant threat to the integrity and confidentiality of the system.

Recommendation

It is recommended to update imlib2 to version 1.4.9 or later to mitigate the risks associated with this vulnerability.

Original NVD description (English source)

Integer overflow in imlib2 before 1.4.9 on 32-bit platforms allows remote attackers to execute arbitrary code via large dimensions in an image, which triggers an out-of-bounds heap memory write operation.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS