CVE-2020-12761: Enlightenment IMLIB2

Critical severity, CVSS 9.1. EPSS: 1.6% chance of exploitation in the next 30 days.

modules/loaders/loader_ico.c in imlib2 1.6.0 has an integer overflow (with resultant invalid memory allocations and out-of-bounds reads) via an icon with many colors in its color map.

Affected products

• Enlightenment IMLIB2: version 1.6.0 only

Published 2020-05-09. Last modified 2026-06-17.