https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 06 Nov 2026 20:12:06 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-118753 <p>FreeImage through 3.18.0 and the danoli3 FreeImage fork before 3.19.25 contain a heap buffer overflow vulnerability in PluginGIF.cpp that allows attackers to write past the canvas allocation via unclipped GIF frame rectangles. Attackers can craft a GIF whose frame left plus width exceeds the logical screen width, causing GifPlaybackCompositeFrame() and GifPlaybackFillRect() to corrupt heap memory when loaded with GIF_PLAYBACK.</p> <p>FreeImage through 3.18.0 and the danoli3 FreeImage fork before 3.19.25 contain a heap buffer overflow vulnerability in PluginGIF.cpp that allows attackers to write past the canvas allocation via unclipped GIF frame rectangles. Attackers can craft a GIF whose frame left plus width exceeds the logical screen width, causing GifPlaybackCompositeFrame() and GifPlaybackFillRect() to corrupt heap memory when loaded with GIF_PLAYBACK.</p> https://db.gcve.eu/vuln/fkie_cve-2026-118753 https://db.gcve.eu/vuln/ghsa-wr69-568q-rrqg <p>FreeImage (danoli3 fork) before 3.19.25 contains a heap buffer overflow vulnerability in PluginGIF.cpp that allows attackers to write past the canvas allocation via unclipped GIF frame rectangles. Attackers can craft a GIF whose frame left plus width exceeds the logical screen width, causing GifPlaybackCompositeFrame() and GifPlaybackFillRect() to corrupt heap memory when loaded with GIF_PLAYBACK.</p> <p>FreeImage (danoli3 fork) before 3.19.25 contains a heap buffer overflow vulnerability in PluginGIF.cpp that allows attackers to write past the canvas allocation via unclipped GIF frame rectangles. Attackers can craft a GIF whose frame left plus width exceeds the logical screen width, causing GifPlaybackCompositeFrame() and GifPlaybackFillRect() to corrupt heap memory when loaded with GIF_PLAYBACK.</p> https://db.gcve.eu/vuln/ghsa-wr69-568q-rrqg https://db.gcve.eu/vuln/ubuntu-cve-2026-118753 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: freeimage, Ubuntu:Pro:16.04:LTS: freeimage, Ubuntu:Pro:18.04:LTS: freeimage, Ubuntu:20.04:LTS: freeimage, Ubuntu:22.04:LTS: freeimage, Ubuntu:24.04:LTS: freeimage, Ubuntu:26.10: freeimage, Ubuntu:26.04:LTS: freeimage</p> <p>FreeImage through 3.18.0 and the danoli3 FreeImage fork before 3.19.25 contain a heap buffer overflow vulnerability in PluginGIF.cpp that allows attackers to write past the canvas allocation via unclipped GIF frame rectangles. Attackers can craft a GIF whose frame left plus width exceeds the logical screen width, causing GifPlaybackCompositeFrame() and GifPlaybackFillRect() to corrupt heap memory when loaded with GIF_PLAYBACK.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: freeimage, Ubuntu:Pro:16.04:LTS: freeimage, Ubuntu:Pro:18.04:LTS: freeimage, Ubuntu:20.04:LTS: freeimage, Ubuntu:22.04:LTS: freeimage, Ubuntu:24.04:LTS: freeimage, Ubuntu:26.10: freeimage, Ubuntu:26.04:LTS: freeimage</p> <p>FreeImage through 3.18.0 and the danoli3 FreeImage fork before 3.19.25 contain a heap buffer overflow vulnerability in PluginGIF.cpp that allows attackers to write past the canvas allocation via unclipped GIF frame rectangles. Attackers can craft a GIF whose frame left plus width exceeds the logical screen width, causing GifPlaybackCompositeFrame() and GifPlaybackFillRect() to corrupt heap memory when loaded with GIF_PLAYBACK.</p> https://db.gcve.eu/vuln/ubuntu-cve-2026-118753