CVE-2023-39125 (ntsc-crt)

NTSC-CRT 2.2.1 has an integer overflow and out-of-bounds write in loadBMP in bmp_rw.c because a file's width, height, and BPP are not validated. NOTE: the vendor's perspective is "this main application was not intended to be a well tested program, it's just something to demonstrate it works and for the user to see how to integrate it into their own programs."

application crt cve file integer integer overflow integrate main out-of-bounds out-of-bounds write overflow perspective program vendor