Secunia Research has discovered two vulnerabilities in DevIL, which can be exploited by malicious people to compromise an application using the library. The vulnerabilities are caused due to boundary errors within the “iGetHdrHeader()” function in src-IL/src/il_hdr.c. These can be exploited to cause a stack-based buffer overflow when processing specially crafted Radiance RGBE files. Successful exploitation allows execution of arbitrary code. Version 1.7.4 is affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/73800/secuniaigethdr-overflow.txt
Source: https://packetstormsecurity.com/files/73800/Secunia-DevIL-iGetHdrHeader-Buffer-Overflows.html