CVE-2010-1526

Source
https://cve.org/CVERecord?id=CVE-2010-1526
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2010-1526.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2010-1526
Downstream
Published
2010-08-24T22:00:01Z
Modified
2026-04-10T03:41:14.135092Z
Summary
[none]
Details

Multiple integer overflows in libgdiplus 2.6.7, as used in Mono, allow attackers to execute arbitrary code via (1) a crafted TIFF file, related to the gdiploadtiffimage function in tiffcodec.c; (2) a crafted JPEG file, related to the gdiploadjpegimageinternal function in jpegcodec.c; or (3) a crafted BMP file, related to the gdipreadbmpimage function in bmpcodec.c, leading to heap-based buffer overflows.

References

Affected packages