Multiple heap-based buffer overflows in imlib 1.9.14 and earlier, which is used by gkrellm and several window managers, allow remote attackers to cause a denial of service (application crash) and execute arbitrary code via certain image files.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade imlibUpgrade imlib2 | Dec 10, 2025 | Jan 21, 2005 |
| Suse | — | Upgrade imlibUpgrade imlib-x86Upgrade imlib-64bitUpgrade imlib-develUpgrade imlib-32bit | Dec 12, 2013 | Jan 10, 2005 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub