Heap Out-of-Bounds Read Vulnerability in FreeImage by Danoli3
CVE-2026-111149

6.9MEDIUM

Key Information:

Vendor: Danoli3
Status: Freeimage
Vendor: CVE Published:; 15 October 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-111149?

A heap out-of-bounds read vulnerability exists in FreeImage (danoli3 fork) versions up to 3.19.23 within the Unpack32Bits() function of the PluginPICT.cpp file. This issue arises because the rowBytes parameter is not validated against the PixMap width, allowing attackers to craft PICT files with incorrect rowBytes values. Exploitation can lead to the over-reading of up to 64 KiB of heap memory, which can result in the unintended disclosure of memory contents or even crash the application.

Affected Version(s)

FreeImage 0 <= 3.19.23

FreeImage 0 <= 3.18.0

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-111149 - Proof of Concept