CVE-2026-118753
FreeImage (danoli3 fork) before 3.19.25 Heap Buffer Overflow via GIF_PLAYBACK Compositing
danoli3 FreeImage
CVSS
8.5HighExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
What fixes it
- 3.19.25FreeImageCVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
FreeImage (danoli3 fork) before 3.19.25 contains a heap buffer overflow vulnerability in PluginGIF.cpp that allows attackers to write past the canvas allocation via unclipped GIF frame rectangles. Attackers can craft a GIF whose frame left plus width exceeds the logical screen width, causing GifPlaybackCompositeFrame() and GifPlaybackFillRect() to corrupt heap memory when loaded with GIF_PLAYBACK.
Text from CVE List
Affected versions 3
- FreeImageaffected: all versions before 3.19.25CVE List
- FreeImageunaffected: 3.19.25CVE List
- FreeImageaffected: all versions through 3.18.0CVE List
References 7
- github.com/danoli3/FreeImage/pull/183Fixvia CVE List
- github.com/danoli3/FreeImage/commit/96f4099f8e307484ba69b4aa14d772b7679a1bfbFixvia CVE List
- github.com/danoli3/FreeImage/commit/0da5ddb4d311e5222251348cca1aa988478b1034Fixvia CVE List
- github.com/danoli3/FreeImage/releases/tag/3.19.25Fixvia CVE List
- vulncheck.com/advisories/freeimage-danoli3-fork-before-3.19.25-heap-buffer-overflow-via-gif-playback-compositingAdvisoryvia CVE List
- github.com/danoli3/FreeImageReferencevia CVE List
- github.com/danoli3/FreeImage/blob/3.19.24/Source/FreeImage/PluginGIF.cpp#L719-L772Referencevia CVE List