Nixpkgs Security Tracker

Untriaged

Permalink CVE-2015-7507

created 1 month ago

libnsbmp.c in Libnsbmp 0.1.2 allows context-dependent attackers to cause a …

libnsbmp.c in Libnsbmp 0.1.2 allows context-dependent attackers to cause a denial of service (out-of-bounds read) via a crafted color table to the (1) bmp_decode_rgb or (2) bmp_decode_rle function.

References

http://www.securityfocus.com/archive/1/archive/1/537132/100/0/threaded x_refsource_MISC
http://seclists.org/fulldisclosure/2015/Dec/73 x_refsource_MISC
http://www.securityfocus.com/archive/1/archive/1/537132/100/0/threaded x_refsource_MISC x_transferred
http://seclists.org/fulldisclosure/2015/Dec/73 x_refsource_MISC x_transferred
http://seclists.org/fulldisclosure/2015/Dec/73 x_refsource_MISC
http://www.securityfocus.com/archive/1/archive/1/537132/100/0/threaded x_refsource_MISC
http://www.securityfocus.com/archive/1/archive/1/537132/100/0/threaded x_refsource_MISC x_transferred
http://seclists.org/fulldisclosure/2015/Dec/73 x_refsource_MISC x_transferred

Affected products

Libnsbmp

==0.1.2

Matching in nixpkgs

pkgs.libnsbmp

BMP Decoder for netsurf browser

nixos-unstable 0.1.7
- nixpkgs-unstable 0.1.7
- nixos-unstable-small 0.1.7
nixos-25.11 0.1.7
- nixos-25.11-small 0.1.7
- nixpkgs-25.11-darwin 0.1.7

pkgs.netsurf.libnsbmp