Summary
generated automatically from NVD dataThe danoli3 fork of FreeImage, in versions before 3.19.22, has a heap buffer overflow (CWE-787) in the PBM RLE decoder in PluginIFF.cpp, which performs no bounds checks on ByteRun1 runs. A crafted IFF/LBM PBM file with runs that straddle scanline ends can make the decoder write up to 127 attacker-controlled bytes past the heap-allocated bitmap. The flaw is rated HIGH with a CVSS v3.1 score of 7.8.
NVD description
FreeImage (danoli3 fork) before 3.19.22 contains a heap buffer overflow vulnerability in the PBM RLE decoder of PluginIFF.cpp that lacks bounds checks on ByteRun1 runs. Attackers can supply a crafted IFF/LBM PBM file with runs straddling scanline ends to write up to 127 controlled bytes past the heap-allocated bitmap.
EPSS · FIRST.org
0.14%probability of exploitation in the next 30 days
Higher than 3% of scored CVEs
EPSS (Exploit Prediction Scoring System) estimates, from observed exploitation activity, how likely a CVE is to be exploited in the next 30 days. It complements CVSS, which measures severity, not likelihood. Score of 2026-10-30, recomputed daily by FIRST.org.
CVSS v3.1 Score
Information
- Published
- 28 oct. 2026
- Updated
- 28 oct. 2026
- Status
- Deferred
- Source
- disclosure@vulncheck.com
Weaknesses (CWE)
References (8)
Similar CVEs
Other vulnerabilities of type CWE-787
Know which CVEs hit the versions you run.
Add the product and its version: cveo.tech lists the CVEs that affect it right away, then alerts you by email when a new one affects it — including before NVD has finished its analysis. Free, an account is all it takes.