What is CVE-2026-47667?
A buffer overflow vulnerability exists in CImg Library prior to version 4.0.0, where the header_size field in `_load_analyze()` is not validated against the actual file size when allocating memory. This can lead to arbitrary code execution via a crafted Analyze/NIfTI file. Upgrading to the latest version is strongly recommended.
Azərbaycanca: CImg Library-nin 4.0.0-dan əvvəlki versiyalarında `_load_analyze()` funksiyasında Analyze/NIfTI faylının başlıq ölçüsünün yoxlanılmaması səbəbindən buffer overflow zəifliyi mövcuddur. Bu, xüsusi hazırlanmış fayl vasitəsilə ixtiyari kod icrasına yol aça bilər. Kitabxananı ən son versiyaya yeniləmək tövsiyə olunur.
Related CVEs
link basis: same weakness class CWE-119
FAQ2
Which versions of CImg Library are affected by CVE-2026-47667?
Versions prior to 4.0.0 are affected.
What is the root cause of CVE-2026-47667?
The `_load_analyze()` function does not validate the header_size field against the actual file size when allocating memory, leading to a buffer overflow.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.