Marcus Meissner discovered that imlib's BMP decoder would crash when loading the test BMP file created by Chris Evans for testing a previous Qt vulnerability. It is believed that this bug could be exploited for arbitrary code execution. ok brad@
Recognize bmp 16 bpp much better.