Dear Maintainer,

 It seems that there exists potential Buffer Overflow in src/xsane-save.c
In line 522,
items_done = fscanf(file, "%d %d", &image_info->image_width, &image_info->image_height);

image_info.image_width is read from external source.

In line 2414 of src/xsane-viewer.c,
row     = malloc(((int) image_info.image_width * v->zoom) * image_info.channels);

image_info.image_width is being multiplied with v->zoom and image_info.channels.
If image_info.image_width is large enough, this can cause integer overflow.