Log in Start free

Vulnerability · Published Oct 28, 2026 · Assigned by VulnCheck

CVE-2026-118752FreeImage through 3.18.0 and danoli3 fork before 3.19.22 Heap Buffer Overflow via IFF/LBM PBM RLE Decoder

High 7.8

In plain English

A high-severity out-of-bounds write in FreeImage from danoli3. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 4% of all known vulnerabilities).

Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.2%top 95.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known

Official description

FreeImage through 3.18.0 and the danoli3 FreeImage fork before 3.19.22 contain a heap buffer overflow vulnerability in the PBM RLE decoder of PluginIFF.cpp that lacks bounds checks on ByteRun1 runs. Attackers can supply a crafted IFF/LBM PBM file with runs straddling scanline ends to write up to 127 controlled bytes past the heap-allocated bitmap.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Ubuntu:22.04:LTSfreeimageno fix listedUBUNTU-CVE-2026-118752
Ubuntu:24.04:LTSfreeimageno fix listedUBUNTU-CVE-2026-118752
Ubuntu:26.04:LTSfreeimageno fix listedUBUNTU-CVE-2026-118752
Ubuntu:26.10freeimageno fix listedUBUNTU-CVE-2026-118752

Affected products (as reported)

VendorProductVersions
danoli3 FreeImage 0 – before 3.19.22
FreeImage FreeImage 0 – through 3.18.0

Weakness: CWE-787 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References