CyberSecBulletin

Fltk vulnerabilities

We track 2 vulnerabilities in Fltk products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 26, 2026.

2vulnerabilities
0critical
2high
0exploited
7.8average CVSS score

Latest Fltk vulnerabilities

  • 7.8 High severity

    fltk: Integer Overflow or Wraparound

    CVE-2026-116724Fltk

    FLTK through 1.4.5 contains an integer overflow vulnerability in Fl_BMP_Image::load_bmp_() that causes undersized pixel buffer allocation from file-supplied width and height. Attackers can supply a crafted BMP or ICO file with large dimensions so row decoding

  • 7.8 High severity

    fltk: Stack-based Buffer Overflow

    CVE-2026-116723Fltk

    FLTK through 1.4.5 contains a stack-based buffer overflow vulnerability in Fl_BMP_Image::load_bmp_() that allows attackers to corrupt stack memory by supplying an oversized BMP colors_used field. Attackers can craft BMP or ICO files with colors_used above 256