CVE-2022-1325

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2022-1325

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-1325.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2022-1325

Downstream

DEBIAN-CVE-2022-1325

UBUNTU-CVE-2022-1325

USN-7437-1

Published

2022-08-31T15:33:00Z

Modified

2026-08-05T08:16:01.788913Z

Summary

[none]

Details

A flaw was found in Clmg, where with the help of a maliciously crafted pandore or bmp file with modified dx and dy header field values it is possible to trick the application into allocating huge buffer sizes like 64 Gigabyte upon reading the file from disk or from a virtual buffer.

Database specific

{
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "Fixed in v3.1.0"
                },
                {
                    "last_affected": "Fixed in v3.1.0"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/1xxx/CVE-2022-1325.json",
    "cwe_ids": [
        "CWE-400"
    ],
    "cna_assigner": "redhat"
}

References

Affected packages

Git / github.com/greyclab/cimg

Affected ranges

Type

GIT

Repo

https://github.com/greyclab/cimg

Events

Introduced

Fixed

619cb58dd90b4e03ac68286c70ed98acbefd1c90

Database specific

{
    "source": "REFERENCES"
}

Affected versions

v.*

v.2.3.0

v.2.3.1

v.2.3.2

v.2.3.3

v.2.3.4

v.2.3.5

v.2.3.6

v.2.4.0

v.2.4.1

v.2.4.2

v.2.4.3

v.2.4.4

v.2.4.5

v.2.5.0

v.2.5.1

v.2.5.2

v.2.5.3

v.2.5.4

v.2.5.5

v.2.5.6

v.2.5.7

v.2.6.0

v.2.6.1

v.2.6.2

v.2.6.3

v.2.6.4

v.2.6.5

v.2.6.6

v.2.6.7

v.2.7.0

v.2.7.1

v.2.7.2

v.2.7.3

v.2.7.4

v.2.7.5

v.2.8.0

v.2.8.1

v.2.8.2

v.2.8.3

v.2.8.4

v.2.9.0

Database specific

vanir_signatures_modified

"2026-08-05T08:16:01Z"

vanir_signatures

[
    {
        "target": {
            "file": "CImg.h"
        },
        "signature_type": "Line",
        "id": "CVE-2022-1325-bfa72b2d",
        "deprecated": false,
        "source": "https://github.com/greyclab/cimg/commit/619cb58dd90b4e03ac68286c70ed98acbefd1c90",
        "digest": {
            "line_hashes": [
                "199009988296311744581264096848594970733",
                "173803945332263725694407102049732288178",
                "76086414852687471766510299435246969734",
                "188833995392480496146840836125663074611",
                "71957255425927416747684803432329910077",
                "333824173661748877333047247943826471973",
                "133180822799134812673775285761798705803",
                "279690001938638048863700790815860644277",
                "26306519678937643407590505004308123302",
                "256715466992219917347677376676370471072",
                "177629669910671853828256090306333181929",
                "182137154599021024632672691704378607452",
                "127142316968632258414998917208938156975"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1"
    }
]

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-1325.json"