An issue in the imlib_free_image_and_decache function of imlib2 v1.9.1 allows attackers to cause a heap buffer overflow via parsing a crafted image.
The product writes data past the end, or before the beginning, of the intended buffer.
A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().
| Link | Tags |
|---|---|
| https://github.com/derf/feh/issues/711 | third party advisory issue tracking exploit |
| https://git.enlightenment.org/old/legacy-imlib2/issues/20 | third party advisory issue tracking exploit |