CVE-2022-21154: Leadtools

High severity, CVSS 7.8. EPSS: 1% chance of exploitation in the next 30 days.

An integer overflow vulnerability exists in the fltSaveCMP functionality of Leadtools 22. A specially-crafted BMP file can lead to an integer overflow, that in turn causes a buffer overflow. An attacker can provide a malicious BMP file to trigger this vulnerability.

Affected products

• Leadtools Leadtools: version 22.0.0.0.0 only

Published 2022-04-14. Last modified 2026-06-17.