imlib2: integer overflow resulting in insufficient heap allocation (CVE-2016-4024)
A vulnerability was found in imlib2. A maliciously crafted filed can
cause an integer overflow,
which will result in insufficient heap allocation.
References:
https://bugzilla.redhat.com/show\_bug.cgi?id=CVE-2016-4024
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=821732
Patch:
https://git.enlightenment.org/legacy/imlib2.git/commit/?id=7eba2e4c8ac0e20838947f10f29d0efe1add8227
(from redmine: issue id 5518, created on 2016-04-28, closed on 2016-05-13)
- Relations:
- child #5519 (closed)
- child #5520 (closed)
- child #5521 (closed)