Vulnerabilities > CVE-2020-25693

CVSS 8.1 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

cimg

fedoraproject

NVD

Published: 2020-12-03

Updated: 2024-11-21

Summary

A flaw was found in CImg in versions prior to 2.9.3. Integer overflows leading to heap buffer overflows in load_pnm() can be triggered by a specially crafted input file processed by CImg, which can lead to an impact to application availability or data integrity.

Vulnerable Configurations

Part	Description	Count
Application	Cimg Cimg Cimg - Cimg Cimg .220 Cimg Cimg 1.6.3 Cimg Cimg 1.6.4 Cimg Cimg 1.6.5 Cimg Cimg 2.2.2 Cimg Cimg 2.2.3 Cimg Cimg 2.3.0 Cimg Cimg 2.3.1 Cimg Cimg 2.3.2 Cimg Cimg 2.3.3 Cimg Cimg 2.3.4 Cimg Cimg 2.3.5 Cimg Cimg 2.3.6 Cimg Cimg 2.4.0 Cimg Cimg 2.4.1 Cimg Cimg 2.4.2 Cimg Cimg 2.4.3 Cimg Cimg 2.4.4 Cimg Cimg 2.4.5 Cimg Cimg 2.5.0 Cimg Cimg 2.5.1 Cimg Cimg 2.5.2 Cimg Cimg 2.5.3 Cimg Cimg 2.5.4 Cimg Cimg 2.5.5 Cimg Cimg 2.5.6 Cimg Cimg 2.5.7 Cimg Cimg 2.6.0 Cimg Cimg 2.6.1 Cimg Cimg 2.6.2 Cimg Cimg 2.6.3 Cimg Cimg 2.6.4 Cimg Cimg 2.6.5 Cimg Cimg 2.6.6 Cimg Cimg 2.6.7 Cimg Cimg 2.7.0 Cimg Cimg 2.7.1 Cimg Cimg 2.7.2 Cimg Cimg 2.7.3 Cimg Cimg 2.7.4 Cimg Cimg 2.7.5 Cimg Cimg 2.8.0 Cimg Cimg 2.8.1 Cimg Cimg 2.8.2 Cimg Cimg 2.8.3 Cimg Cimg 2.8.4 Cimg Cimg 2.9.0 Cimg Cimg 2.9.1 Cimg Cimg 2.9.2	50
OS	Fedoraproject Fedoraproject Fedora 32 Fedoraproject Fedora 33 Fedoraproject Fedora 34	3

Vulnerabilities > CVE-2020-25693 {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"CVE-2020-25693"}]}

Summary

Vulnerable Configurations

References

Vulnerabilities > CVE-2020-25693