https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 05 Nov 2026 03:38:39 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-116723 <p>FLTK through 1.4.5 contains a stack-based buffer overflow vulnerability in Fl_BMP_Image::load_bmp_() that allows attackers to corrupt stack memory by supplying an oversized BMP colors_used field. Attackers can craft BMP or ICO files with colors_used above 256 to overflow the 768-byte colormap array, causing crashes or potential code execution.</p> <p>FLTK through 1.4.5 contains a stack-based buffer overflow vulnerability in Fl_BMP_Image::load_bmp_() that allows attackers to corrupt stack memory by supplying an oversized BMP colors_used field. Attackers can craft BMP or ICO files with colors_used above 256 to overflow the 768-byte colormap array, causing crashes or potential code execution.</p> https://db.gcve.eu/vuln/fkie_cve-2026-116723 https://db.gcve.eu/vuln/ghsa-64v9-4hfh-jmvh <p>FLTK through 1.4.5 contains a stack-based buffer overflow vulnerability in Fl_BMP_Image::load_bmp_() that allows attackers to corrupt stack memory by supplying an oversized BMP colors_used field. Attackers can craft BMP or ICO files with colors_used above 256 to overflow the 768-byte colormap array, causing crashes or potential code execution.</p> <p>FLTK through 1.4.5 contains a stack-based buffer overflow vulnerability in Fl_BMP_Image::load_bmp_() that allows attackers to corrupt stack memory by supplying an oversized BMP colors_used field. Attackers can craft BMP or ICO files with colors_used above 256 to overflow the 768-byte colormap array, causing crashes or potential code execution.</p> https://db.gcve.eu/vuln/ghsa-64v9-4hfh-jmvh https://db.gcve.eu/vuln/opensuse-su-2026:12362-1 <p>fltk-devel-1.3.11-2.1 on GA media</p> <p>fltk-devel-1.3.11-2.1 on GA media</p> https://db.gcve.eu/vuln/opensuse-su-2026:12362-1 https://db.gcve.eu/vuln/ubuntu-cve-2026-116723 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: fltk1.3, Ubuntu:18.04:LTS: fltk1.3, Ubuntu:20.04:LTS: fltk1.3, Ubuntu:22.04:LTS: fltk1.3, Ubuntu:24.04:LTS: fltk1.3, Ubuntu:26.10: fltk1.3, Ubuntu:26.10: fltk1.4, Ubuntu:26.04:LTS: fltk1.3, Ubuntu:26.04:LTS: fltk1.4</p> <p>FLTK through 1.4.5 contains a stack-based buffer overflow vulnerability in Fl_BMP_Image::load_bmp_() that allows attackers to corrupt stack memory by supplying an oversized BMP colors_used field. Attackers can craft BMP or ICO files with colors_used above 256 to overflow the 768-byte colormap array, causing crashes or potential code execution.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: fltk1.3, Ubuntu:18.04:LTS: fltk1.3, Ubuntu:20.04:LTS: fltk1.3, Ubuntu:22.04:LTS: fltk1.3, Ubuntu:24.04:LTS: fltk1.3, Ubuntu:26.10: fltk1.3, Ubuntu:26.10: fltk1.4, Ubuntu:26.04:LTS: fltk1.3, Ubuntu:26.04:LTS: fltk1.4</p> <p>FLTK through 1.4.5 contains a stack-based buffer overflow vulnerability in Fl_BMP_Image::load_bmp_() that allows attackers to corrupt stack memory by supplying an oversized BMP colors_used field. Attackers can craft BMP or ICO files with colors_used above 256 to overflow the 768-byte colormap array, causing crashes or potential code execution.</p> https://db.gcve.eu/vuln/ubuntu-cve-2026-116723