FreeImage before 3.19.22 Heap Buffer Overflow via IFF/LBM PBM RLE Decoder

Özet

Türkçe özeti henüz hazır değil; şimdilik kaynağın kendi açıklamasını gösteriyoruz.

FreeImage (danoli3 fork) before 3.19.22 contains a heap buffer overflow vulnerability in the PBM RLE decoder of PluginIFF.cpp that lacks bounds checks on ByteRun1 runs. Attackers can supply a crafted IFF/LBM PBM file with runs straddling scanline ends to write up to 127 controlled bytes past the heap-allocated bitmap.

Etkilenen sürümler2 yazılım

Kaynaklar10 kaynak

• CVE.org kaydı
• NVD kaydı
• github.com/danoli3/FreeImage/pull/161 Yama
• github.com/…ommit/e1105d3b464b679f0525c6178d9ccf49d55cf712 Yama
• github.com/…ommit/cf173c16354274dc8fb739dc395fc7f32efe7d45 Yama
• github.com/danoli3/FreeImage/issues/156 Üçüncü taraf
• vulncheck.com/…ap-buffer-overflow-via-iff-lbm-pbm-rle-decoder Üçüncü taraf
• github.com/danoli3/FreeImage Diğer
• github.com/…ge/blob/3.19.21/Source/FreeImage/PluginIFF.cpp Diğer
• github.com/danoli3/FreeImage/releases/tag/3.19.22 Diğer

Kayıt geçmişi

1. 29 Eki 2026 00:11Yayımlandı

İlgili açıklar

• 7,8 CVE-2026-118753FreeImage (danoli3 fork) before 3.19.25 Heap Buffer Overflow via GIF_PLAYBACK Compositing
• 6,5 CVE-2026-58458Don't Starve Together Memory Corruption via world_gen_data
• 6,5 CVE-2026-82962Out-of-bounds write in Zephyr Ethernet L2 when adding the link-layer header to a forwarded packet
• 7,8 CVE-2026-82961Unvalidated pin index in GPIO syscall handlers allows out-of-bounds kernel writes from user mode
• 4,8 CVE-2026-103392Session Smart Router: A SACK option causes out-of-bounds memory access and TCP payload corruption when TCP sequence stitching is enabled
• 5,3 CVE-2026-103391Session Smart Router: An attacker-controlled TCP option causes an out-of-bounds write when using the TCP proxy feature