CVE-2026-118752

The FreeImage (danoli3 fork) software before version 3.19.22 is vulnerable to a heap buffer overflow in the PBM RLE decoder of PluginIFF.cpp. The root cause is a lack of bounds checks on ByteRun1 runs , allowing an attacker to provide a crafted IFF/LBM PBM file with runs straddling scanline ends....