CVE-2008-2426

no score yetEPSS 5.7%

Multiple stack-based buffer overflows in Imlib 2 (aka imlib2) 1.4.0 allow user-assisted remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via (1) a PNM image with a crafted header, related to the load function in src/modules/loaders/loader_pnm.c; or (2) a crafted XPM image, related to the load function in src/modules/loader_xpm.c.

EPSS: 5.7% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)
CWE: CWE-119
Published: 2008-06-02
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

carsten_haitzler:imlib2

References

http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html
http://secunia.com/advisories/30401
http://secunia.com/advisories/30485
http://secunia.com/advisories/30572
http://secunia.com/advisories/30727

Check your stack JSON