Patchwire CVEs, their patch status, and feeds to follow them

CVE-2020-12761

Fixed in a distro release EPSS 2%

modules/loaders/loader_ico.c in imlib2 1.6.0 has an integer overflow (with resultant invalid memory allocations and out-of-bounds reads) via an icon with many colors in its color map.

Published 2020-05-09 · CVE record · OSV

Products: enlightenment imlib2

Distro releases

ReleasePackageFixed in
Debian 12imlib21.6.1-2
Debian 13imlib21.6.1-2
Debian 14imlib21.6.1-2
Ubuntu 20.04 LTSimlib21.6.1-1ubuntu0.1
openSUSE Tumbleweedimlib21.11.1-2.1