CVE-2026-111138 | NetSurf libnsbmp up to 0.1.7 RLE Decoder bmp_decode_rle8 out-of-bounds

SecurityVulns
Yanac

A vulnerability marked as problematic has been reported in NetSurf libnsbmp up to 0.1.7. The impacted element is the function bmp_decode_rle8 of the component RLE Decoder. This manipulation causes out-of-bounds read.

This vulnerability appears as CVE-2026-111138. The attack requires local access. There is no available exploit.VulDB Recent EntriesRead More