CVE-2017-7875

CVE-2017-7875 describes a critical out-of-bounds heap write vulnerability in feh versions prior to 2.18.3, specifically in the wallpaper.c component. This flaw, stemming from an integer overflow, can lead to a buffer overflow or double free when a malicious client impersonates the E17 window manager during IPC message reception. With a CVSS score of 9.8 (CRITICAL), it allows for complete compromise of confidentiality, integrity, and availability with low attack complexity and no user interaction required. Despite its severity and significant community discussion (10 mentions), there is no evidence of active exploitation, nor are there publicly available exploits in Metasploit, Nuclei, or ExploitDB.