CImg Library vulnerabilities

Vulnerability in CImg Library before version 4.0.0. The `_load_analyze()` function reads the `header_size` field from an Analyze/NIfTI file and allocates memory without checking the file size, potentially causing memory leaks (e.g., 1.3 GB per call) with a crafted 6-byte file.

In CImg Library prior to commit c3aacf5, the nb_colors field read from the BMP file header is used directly to compute an allocation size without validating it against the remaining file size. A crafted BMP file with a large nb_colors value triggers an out-of-memory condition, crashing any application that uses CImg to load untrusted BMP files.

In CImg Library (a C++ image processing library) prior to commit 4ca26bc, an integer overflow in the W*H*D size computation inside _load_pnm() can bypass the memory allocation guard. A crafted PNM/PGM/PPM file with large dimension values causes the overflow to wrap around, allocating an undersized buffer and potentially triggering a heap buffer overflow.