Add cloned bug from #892780 for src:img

There was one remaining issue unfixed (respectively yet very unclear)
for CVE-2018-7587. Track with a spearate bug and closed the former bug.