CVE-2026-42146

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-42146", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-04-24T17:15:21.834Z", "datePublished": "2026-05-04T17:53:23.830Z", "dateUpdated": "2026-05-06T13:44:14.581Z"}, "containers": {"cna": {"title": "CImg Library: Uncontrolled memory allocation via nb_colors field in _load_bmp", "problemTypes": [{"descriptions": [{"cweId": "CWE-789", "lang": "en", "description": "CWE-789: Memory Allocation with Excessive Size Value", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1"}}], "references": [{"name": "https://github.com/GreycLab/CImg/security/advisories/GHSA-g54r-qmgx-c6fv", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/GreycLab/CImg/security/advisories/GHSA-g54r-qmgx-c6fv"}, {"name": "https://github.com/GreycLab/CImg/issues/477", "tags": ["x_refsource_MISC"], "url": "https://github.com/GreycLab/CImg/issues/477"}, {"name": "https://github.com/GreycLab/CImg/commit/c3aacf5b96ac1e54b7af1957c6737dbf3949f6d3", "tags": ["x_refsource_MISC"], "url": "https://github.com/GreycLab/CImg/commit/c3aacf5b96ac1e54b7af1957c6737dbf3949f6d3"}, {"name": "https://github.com/GreycLab/CImg/releases/tag/v.3.7.5", "tags": ["x_refsource_MISC"], "url": "https://github.com/GreycLab/CImg/releases/tag/v.3.7.5"}], "affected": [{"vendor": "GreycLab", "product": "CImg", "versions": [{"version": "< c3aacf5b96ac1e54b7af1957c6737dbf3949f6d3", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-05-04T17:53:23.830Z"}, "descriptions": [{"lang": "en", "value": "CImg Library is a C++ library for image processing. Prior to commit c3aacf5, the nb_colors field read from the BMP file header is used directly to compute an allocation size without validating it against the remaining file size. A crafted BMP file with a large nb_colors value triggers an out-of-memory condition, crashing any application that uses CImg to load untrusted BMP files. This issue has been patched via commit c3aacf5."}], "source": {"advisory": "GHSA-g54r-qmgx-c6fv", "discovery": "UNKNOWN"}}, "adp": [{"references": [{"url": "https://github.com/GreycLab/CImg/issues/477", "tags": ["exploit"]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-05-06T13:43:28.189688Z", "id": "CVE-2026-42146", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-06T13:44:14.581Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-42146", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-05-06T13:43:28.189688Z"}}}], "references": [{"url": "https://github.com/GreycLab/CImg/issues/477", "tags": ["exploit"]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-06T13:44:04.791Z"}}], "cna": {"title": "CImg Library: Uncontrolled memory allocation via nb_colors field in _load_bmp", "source": {"advisory": "GHSA-g54r-qmgx-c6fv", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}], "affected": [{"vendor": "GreycLab", "product": "CImg", "versions": [{"status": "affected", "version": "< c3aacf5b96ac1e54b7af1957c6737dbf3949f6d3"}]}], "references": [{"url": "https://github.com/GreycLab/CImg/security/advisories/GHSA-g54r-qmgx-c6fv", "name": "https://github.com/GreycLab/CImg/security/advisories/GHSA-g54r-qmgx-c6fv", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/GreycLab/CImg/issues/477", "name": "https://github.com/GreycLab/CImg/issues/477", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/GreycLab/CImg/commit/c3aacf5b96ac1e54b7af1957c6737dbf3949f6d3", "name": "https://github.com/GreycLab/CImg/commit/c3aacf5b96ac1e54b7af1957c6737dbf3949f6d3", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/GreycLab/CImg/releases/tag/v.3.7.5", "name": "https://github.com/GreycLab/CImg/releases/tag/v.3.7.5", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "CImg Library is a C++ library for image processing. Prior to commit c3aacf5, the nb_colors field read from the BMP file header is used directly to compute an allocation size without validating it against the remaining file size. A crafted BMP file with a large nb_colors value triggers an out-of-memory condition, crashing any application that uses CImg to load untrusted BMP files. This issue has been patched via commit c3aacf5."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-789", "description": "CWE-789: Memory Allocation with Excessive Size Value"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-05-04T17:53:23.830Z"}}}, "cveMetadata": {"cveId": "CVE-2026-42146", "state": "PUBLISHED", "dateUpdated": "2026-05-06T13:44:14.581Z", "dateReserved": "2026-04-24T17:15:21.834Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-05-04T17:53:23.830Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "CImg", "vendor": "GreycLab", "versions": [{"status": "affected", "version": "< c3aacf5b96ac1e54b7af1957c6737dbf3949f6d3"}]}], "source": "security-advisories@github.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "CImg Library is a C++ library for image processing. Prior to commit c3aacf5, the nb_colors field read from the BMP file header is used directly to compute an allocation size without validating it against the remaining file size. A crafted BMP file with a large nb_colors value triggers an out-of-memory condition, crashing any application that uses CImg to load untrusted BMP files. This issue has been patched via commit c3aacf5."}, {"lang": "es", "value": "CImg Biblioteca es una biblioteca de C++ para procesamiento de im\u00e1genes. Antes del commit c3aacf5, el campo nb_colors le\u00eddo del encabezado del archivo BMP se utiliza directamente para calcular un tama\u00f1o de asignaci\u00f3n sin validarlo contra el tama\u00f1o restante del archivo. Un archivo BMP manipulado con un valor grande de nb_colors desencadena una condici\u00f3n de falta de memoria, provocando el bloqueo de cualquier aplicaci\u00f3n que utilice CImg para cargar archivos BMP no confiables. Este problema ha sido parcheado mediante el commit c3aacf5."}], "id": "CVE-2026-42146", "lastModified": "2026-10-26T19:10:00.163", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-42146", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-05-06T13:43:28.189688Z", "version": "2.0.3"}}]}, "published": "2026-05-04T18:16:31.977", "references": [{"source": "security-advisories@github.com", "url": "https://github.com/GreycLab/CImg/commit/c3aacf5b96ac1e54b7af1957c6737dbf3949f6d3"}, {"source": "security-advisories@github.com", "url": "https://github.com/GreycLab/CImg/issues/477"}, {"source": "security-advisories@github.com", "url": "https://github.com/GreycLab/CImg/releases/tag/v.3.7.5"}, {"source": "security-advisories@github.com", "url": "https://github.com/GreycLab/CImg/security/advisories/GHSA-g54r-qmgx-c6fv"}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "url": "https://github.com/GreycLab/CImg/issues/477"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-789"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[0,c3aacf5b96ac1e54b7af1957c6737dbf3949f6d3)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "CImg", "source": "cna", "vendor": "GreycLab"}, "product": "cimg", "vendor": "greyclab"}], "created": "2026-05-04T19:43:43.646649+00:00", "updated": "2026-05-04T20:00:07.076141+00:00", "vendors": ["greyclab", "greyclab$PRODUCT$cimg"]}