Threats tagged 'ghsa-64v9-4hfh-jmvh'

FLTK versions through 1.4.5 have a stack-based buffer overflow vulnerability in the Fl_BMP_Image::load_bmp_() function. This flaw occurs when an attacker supplies a BMP or ICO file with a colors_used field value exceeding 256, overflowing a 768-byte colormap array. The vulnerability can lead to application crashes or potentially allow code execution.