CVE-2019-5100

CVE-2019-5100 is an integer overflow vulnerability in the BMP header parsing functionality of LEADTOOLS 20. An attacker can craft a malicious BMP image to trigger this flaw, potentially leading to arbitrary code execution. This is a high-severity vulnerability (CVSS 7.8) that requires user interaction (e.g., opening the malicious image) but has low attack complexity, with potential for high impact on confidentiality, integrity, and availability. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), it has garnered some community discussion and media coverage, indicating awareness of its potential.