Live › vulnerability › CVE-2026-118752
Go to dashboardThe danoli3 fork of FreeImage before 3.19.22 has a heap buffer overflow in the PBM RLE decoder in PluginIFF.cpp, which does not bounds-check ByteRun1 runs. A crafted IFF/LBM PBM file can write up to 127 attacker-controlled bytes past the heap bitmap.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-28 22:35 UTC. All times on this page are UTC.
Applications that link the danoli3 fork of FreeImage before 3.19.22 and decode IFF/LBM or PBM images supplied by users or other untrusted sources are exposed. Systems that only process trusted images, or that do not use this fork, can skip it.
No product ranges from the sources yet.
grep -ri freeimage in dependency manifestsunknown if the sources do not say which code paths reach the decoder)3.19.22 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
FreeImage (danoli3 fork) before 3.19.22 contains a heap buffer overflow vulnerability in the PBM RLE decoder of PluginIFF.cpp that lacks bounds checks on ByteRun1 runs. Attackers can supply a crafted IFF/LBM PBM file with runs straddling scanline ends to write up to 127 controlled bytes past the heap-allocated bitmap.
This page as .md · .json · in your agent: get_signal("CVE-2026-118752")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.