{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/freeimage-danoli3-fork--3.19.22/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"cvss":7.8,"id":"CVE-2026-118752"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["FreeImage (danoli3 fork) \u003c 3.19.22"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":[],"content_html":"\u003cp\u003eCVE-2026-118752 affects the danoli3 fork of the FreeImage library prior to 3.19.22. A heap buffer overflow exists in the PBM RLE decoder of PluginIFF.cpp, which lacks bounds checks on ByteRun1 runs. Attackers can supply a crafted IFF/LBM PBM file with runs straddling scanline ends to write up to 127 controlled bytes past the heap-allocated bitmap.\u003c/p\u003e\n","date_modified":"2026-10-28T22:48:40Z","date_published":"2026-10-28T22:48:40Z","id":"https://feed.craftedsignal.io/briefs/2026-10-freeimage-heap-overflow/","summary":"The danoli3 fork of the FreeImage library before 3.19.22 contains a heap buffer overflow in the PBM RLE decoder of PluginIFF.cpp due to missing bounds checks on ByteRun1 runs.","title":"FreeImage: Heap buffer overflow in PBM RLE decoder (CVE-2026-118752)","url":"https://feed.craftedsignal.io/briefs/2026-10-freeimage-heap-overflow/"}],"language":"en","title":"CraftedSignal Threat Feed - FreeImage (Danoli3 Fork) \u003c 3.19.22","version":"https://jsonfeed.org/version/1.1"}