https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-27T14:30:42.678272+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-111149 CVE-2026-111149 — FreeImage through 3.19.23 Heap Out-of-Bounds Read via PICT Unpack32Bits 2026-10-27T14:30:42.679052+00:00

Affected: danoli3 FreeImage, FreeImage

FreeImage (danoli3 fork) through 3.19.23 contains a heap out-of-bounds read vulnerability in Unpack32Bits() in PluginPICT.cpp because rowBytes is never checked against the file-controlled PixMap width. Attackers can supply a crafted PICT file with a truncated or undersized rowBytes to over-read up to 64 KiB of heap, leaking memory into decoded pixels or crashing the process.