FLTK through 1.4.5 contains an integer overflow vulnerability in Fl_BMP_Image::load_bmp_() that causes undersized pixel buffer allocation from file-supplied width and height. Attackers can supply a crafted BMP or ICO file with large dimensions so row decoding writes file-derived data past the heap buffer, corrupting the application heap. This vulnerability can lead to potential heap corruption and applica [truncated]
A stack-based buffer overflow vulnerability exists in FLTK through 1.4.5 in the Fl_BMP_Image::load_bmp_() function, allowing attackers to corrupt stack memory by supplying an oversized BMP colors_used field. This can be exploited by crafting BMP or ICO files with colors_used above 256, potentially leading to crashes or code execution. The vulnerability requires attention from defenders to prevent potentia [truncated]
