Bug 2553691 (CVE-2026-111138)
| Summary: | CVE-2026-111138 libnsbmp: libnsbmp: Denial of Service via crafted BMP image decoding | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | OSIDB Bzimport <bzimport> |
| Component: | vulnerability | Assignee: | Product Security DevOps Team <prodsec-dev> |
| Status: | NEW --- | QA Contact: | |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | unspecified | Keywords: | Security |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | --- | |
| Doc Text: |
A flaw was found in libnsbmp. An attacker can exploit this vulnerability by providing a specially crafted bitmap (BMP) image file to an application utilizing the library. Due to improper bounds checking during the decoding of compressed image data, processing the malformed image triggers an out-of-bounds read. This flaw can cause the affected application to crash, resulting in a Denial of Service (DoS).
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | --- | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 2554226 | ||
| Bug Blocks: | |||
|
Description
OSIDB Bzimport
2026-10-15 19:04:27 UTC
|