CVE-2008-5262: Devil Developers Image Library

High severity, CVSS 7.5. EPSS: 3.2% chance of exploitation in the next 30 days.

Multiple stack-based buffer overflows in the iGetHdrHeader function in src-IL/src/il_hdr.c in DevIL 1.7.4 allow context-dependent attackers to execute arbitrary code via a crafted Radiance RGBE file.

Affected products

• Devil Developers Image Library: version 1.7.4 only

Published 2009-01-13. Last modified 2026-06-16.