Heap Buffer Overflow in FreeImage from Danoli3 Fork
CVE-2026-118753
8.5HIGH
What is CVE-2026-118753?
The FreeImage library, specifically the danoli3 fork version prior to 3.19.25, is susceptible to a heap buffer overflow due to improper handling of GIF frame rectangles in PluginGIF.cpp. Attackers can craft malicious GIF files where the specified frame dimensions exceed the logical screen width, which can lead to memory corruption when the functions GifPlaybackCompositeFrame() and GifPlaybackFillRect() are invoked. This vulnerability presents a significant risk as it allows unauthorized writing past allocated memory spaces, potentially leading to data manipulation or crashes.
Affected Version(s)
FreeImage 0 < 3.19.25
FreeImage 0 <= 3.18.0
FreeImage 3.19.25