CVE-2026-111149

The FreeImage (danoli3 fork) software, versions through 3.19.23 , is vulnerable to a heap out-of-bounds read in the Unpack32Bits() function within PluginPICT.cpp. The root cause is a failure to validate rowBytes against the file-controlled PixMap width . An attacker can provide a crafted PICT fil...

CVE-2026-111149 FreeImage through 3.19.23 Heap Out-of-Bounds Read via PICT Unpack32Bits

FreeImage danoli3 fork through 3.19.23 contains a heap out-of-bounds read vulnerability in Unpack32Bits in PluginPICT.cpp because rowBytes is never checked against the file-controlled PixMap width. Attackers can supply a crafted PICT file with a truncated or undersized rowBytes to over-read up to...