CVE-2020-12761
Fixed in a distro release EPSS 2%
modules/loaders/loader_ico.c in imlib2 1.6.0 has an integer overflow (with resultant invalid memory allocations and out-of-bounds reads) via an icon with many colors in its color map.
Products: enlightenment imlib2
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | imlib2 | 1.6.1-2 |
| Debian 13 | imlib2 | 1.6.1-2 |
| Debian 14 | imlib2 | 1.6.1-2 |
| Ubuntu 20.04 LTS | imlib2 | 1.6.1-1ubuntu0.1 |
| openSUSE Tumbleweed | imlib2 | 1.11.1-2.1 |