2 CVEs publicados el 2026-10-27 · CVSS máximo 7.8/10.
Producto afectado
FLTK 1.4.5
CVEs de este lote
| CVE | Severidad | CVSS | EPSS | Estado | Descripción |
|---|---|---|---|---|---|
| CVE-2026-116723 | HIGH | 7.8 | — | FLTK through 1.4.5 contains a stack-based buffer overflow vulnerability in Fl_BMP_Image::load_bmp_() that allows attackers to corrupt stack memory by supplying an oversized BMP colors_used field. | |
| CVE-2026-116724 | HIGH | 7.8 | — | FLTK through 1.4.5 contains an integer overflow vulnerability in Fl_BMP_Image::load_bmp_() that causes undersized pixel buffer allocation from file-supplied width and height. |