Danoli3 Freeimage vulnerabilities

1 vulnerability

Known vulnerabilities in Danoli3 Freeimage, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.9CVE-2026-111149danoli3freeimage+1
EPSS score
0.13%
FreeImage (danoli3 fork) through 3.19.23 contains a heap out-of-bounds read vulnerability in Unpack32Bits() in PluginPICT.cpp because rowBytes is never checked against the file-controlled PixMap width. Attackers can supply a crafted PICT file with a truncated or undersized rowBytes to over-read up to 64 KiB of heap, leaking memory into decoded pixels or crashing the process.