CVE-2018-17073: Bitmap Project Bitmap

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

wernsey/bitmap before 2018-08-18 allows a NULL pointer dereference via a 4-bit image.

Affected products

• Bitmap Project Bitmap: before 2018-09-24 (fixed in 2018-09-24)

Published 2018-09-16. Last modified 2026-06-17.