CVE-2026-111139: libnsbmp 0 through 0.1.7

Affected technology

libnsbmp · 0 through 0.1.7
NetSurf

Description’s affected range: through 0.1.7

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Local · No privileges required · Passive user interaction

What an attacker can do

Attackers can provide an ICO whose inner bitmap width is not a multiple of 8, causing a heap over-read that can crash applications calling bmp_decode(). Vendor/CNA’s CVSS 4.0 assessment (base score 6.8/10) rates confidentiality and integrity impact as none; availability impact as high.