<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: imlib</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2007-3568: The _LoadBMP function in imlib 1.9.15 and earlier allows context-dependent attackers to cause a denial of serv</title><link>https://patchthecve.com/cve/CVE-2007-3568.html</link><guid>https://patchthecve.com/cve/CVE-2007-3568.html</guid><pubDate>Tue, 16 Jun 2026 22:42:17 +0000</pubDate><description>MEDIUM 5.0: The _LoadBMP function in imlib 1.9.15 and earlier allows context-dependent attackers to cause a denial of service (infinite loop) via a BMP image with a Bits Per Page (BPP) value of 0.</description></item><item><title>CVE-2004-1026: Multiple integer overflows in the image handler for imlib 1.9.14 and earlier, which is used by gkrellm and sev</title><link>https://patchthecve.com/cve/CVE-2004-1026.html</link><guid>https://patchthecve.com/cve/CVE-2004-1026.html</guid><pubDate>Tue, 16 Jun 2026 22:06:52 +0000</pubDate><description>HIGH 10.0: Multiple integer overflows in the image handler for imlib 1.9.14 and earlier, which is used by gkrellm and several window managers, allow remote attackers to cause a denial of service (application crash) and execute arbitrary code via certain image files.</description></item><item><title>CVE-2004-1025: Multiple heap-based buffer overflows in imlib 1.9.14 and earlier, which is used by gkrellm and several window </title><link>https://patchthecve.com/cve/CVE-2004-1025.html</link><guid>https://patchthecve.com/cve/CVE-2004-1025.html</guid><pubDate>Tue, 16 Jun 2026 22:06:52 +0000</pubDate><description>HIGH 10.0: Multiple heap-based buffer overflows in imlib 1.9.14 and earlier, which is used by gkrellm and several window managers, allow remote attackers to cause a denial of service (application crash) and execute arbitrary code via certain image files.</description></item><item><title>CVE-2004-0817: Multiple heap-based buffer overflows in the imlib BMP image handler allow remote attackers to execute arbitrar</title><link>https://patchthecve.com/cve/CVE-2004-0817.html</link><guid>https://patchthecve.com/cve/CVE-2004-0817.html</guid><pubDate>Tue, 16 Jun 2026 22:06:26 +0000</pubDate><description>HIGH 7.5: Multiple heap-based buffer overflows in the imlib BMP image handler allow remote attackers to execute arbitrary code via a crafted BMP file.</description></item><item><title>CVE-2004-0802: Buffer overflow in the BMP loader in imlib2 before 1.1.2 allows remote attackers to execute arbitrary code via</title><link>https://patchthecve.com/cve/CVE-2004-0802.html</link><guid>https://patchthecve.com/cve/CVE-2004-0802.html</guid><pubDate>Tue, 16 Jun 2026 22:06:24 +0000</pubDate><description>MEDIUM 5.1: Buffer overflow in the BMP loader in imlib2 before 1.1.2 allows remote attackers to execute arbitrary code via a specially-crafted BMP image, a different vulnerability than CVE-2004-0817.</description></item><item><title>CVE-2004-0827: Multiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4, and 6.x before 6.0.6.2, allow </title><link>https://patchthecve.com/cve/CVE-2004-0827.html</link><guid>https://patchthecve.com/cve/CVE-2004-0827.html</guid><pubDate>Tue, 16 Jun 2026 22:06:28 +0000</pubDate><description>HIGH 7.5: Multiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4, and 6.x before 6.0.6.2, allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via malformed (1) AVI, (2) BMP, or (3) DIB files.</description></item><item><title>CVE-2002-0168: Vulnerability in Imlib before 1.9.13 allows attackers to cause a denial of service (crash) and possibly execut</title><link>https://patchthecve.com/cve/CVE-2002-0168.html</link><guid>https://patchthecve.com/cve/CVE-2002-0168.html</guid><pubDate>Tue, 16 Jun 2026 21:56:55 +0000</pubDate><description>HIGH 7.5: Vulnerability in Imlib before 1.9.13 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code by manipulating arguments that are passed to malloc, which results in a heap corruption.</description></item><item><title>CVE-2002-0167: Imlib before 1.9.13 sometimes uses the NetPBM package to load trusted images, which could allow attackers to c</title><link>https://patchthecve.com/cve/CVE-2002-0167.html</link><guid>https://patchthecve.com/cve/CVE-2002-0167.html</guid><pubDate>Tue, 16 Jun 2026 21:56:55 +0000</pubDate><description>HIGH 7.5: Imlib before 1.9.13 sometimes uses the NetPBM package to load trusted images, which could allow attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain weaknesses of NetPBM.</description></item><item><title>CVE-2002-0143: Buffer overflow in Eterm of Enlightenment Imlib2 1.0.4 and earlier allows local users to execute arbitrary cod</title><link>https://patchthecve.com/cve/CVE-2002-0143.html</link><guid>https://patchthecve.com/cve/CVE-2002-0143.html</guid><pubDate>Tue, 16 Jun 2026 21:56:52 +0000</pubDate><description>MEDIUM 4.6: Buffer overflow in Eterm of Enlightenment Imlib2 1.0.4 and earlier allows local users to execute arbitrary code via a long HOME environment variable.</description></item></channel></rss>