FreeImage (Danoli3 Fork) < 3.19.22 - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/freeimage-danoli3-fork--3.19.22/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioWed, 28 Oct 2026 22:48:40 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgFreeImage: Heap buffer overflow in PBM RLE decoder (CVE-2026-118752)https://feed.craftedsignal.io/briefs/2026-10-freeimage-heap-overflow/Wed, 28 Oct 2026 22:48:40 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-freeimage-heap-overflow/The danoli3 fork of the FreeImage library before 3.19.22 contains a heap buffer overflow in the PBM RLE decoder of PluginIFF.cpp due to missing bounds checks on ByteRun1 runs.<p>CVE-2026-118752 affects the danoli3 fork of the FreeImage library prior to 3.19.22. A heap buffer overflow exists in the PBM RLE decoder of PluginIFF.cpp, which lacks bounds checks on ByteRun1 runs. Attackers can supply a crafted IFF/LBM PBM file with runs straddling scanline ends to write up to 127 controlled bytes past the heap-allocated bitmap.</p> highadvisory