FreeImage (danoli3 fork) before 3.19.25 Heap Buffer Overflow via GIF_PLAYBACK Compositing

Özet

Türkçe özeti henüz hazır değil; şimdilik kaynağın kendi açıklamasını gösteriyoruz.

FreeImage (danoli3 fork) before 3.19.25 contains a heap buffer overflow vulnerability in PluginGIF.cpp that allows attackers to write past the canvas allocation via unclipped GIF frame rectangles. Attackers can craft a GIF whose frame left plus width exceeds the logical screen width, causing GifPlaybackCompositeFrame() and GifPlaybackFillRect() to corrupt heap memory when loaded with GIF_PLAYBACK.

Etkilenen sürümler2 yazılım

Kaynaklar9 kaynak

• CVE.org kaydı
• NVD kaydı
• github.com/danoli3/FreeImage/pull/183 Yama
• github.com/…ommit/96f4099f8e307484ba69b4aa14d772b7679a1bfb Yama
• github.com/…ommit/0da5ddb4d311e5222251348cca1aa988478b1034 Yama
• vulncheck.com/…p-buffer-overflow-via-gif-playback-compositing Üçüncü taraf
• github.com/danoli3/FreeImage Diğer
• github.com/…ge/blob/3.19.24/Source/FreeImage/PluginGIF.cpp Diğer
• github.com/danoli3/FreeImage/releases/tag/3.19.25 Diğer

Kayıt geçmişi

1. 29 Eki 2026 00:11Yayımlandı

İlgili açıklar

• 7,8 CVE-2026-118752FreeImage before 3.19.22 Heap Buffer Overflow via IFF/LBM PBM RLE Decoder
• 6,5 CVE-2026-58458Don't Starve Together Memory Corruption via world_gen_data
• 6,5 CVE-2026-82962Out-of-bounds write in Zephyr Ethernet L2 when adding the link-layer header to a forwarded packet
• 7,8 CVE-2026-82961Unvalidated pin index in GPIO syscall handlers allows out-of-bounds kernel writes from user mode
• 4,8 CVE-2026-103392Session Smart Router: A SACK option causes out-of-bounds memory access and TCP payload corruption when TCP sequence stitching is enabled
• 5,3 CVE-2026-103391Session Smart Router: An attacker-controlled TCP option causes an out-of-bounds write when using the TCP proxy feature