PT-2026-64103

Summary Pillow's TGA RLE encoder reads past its row buffer when saving a mode "1" image. Adjacent process heap bytes can be copied into the generated TGA file. The bug is reachable through the public save API: python im.saveout, format="TGA", compression="tga rle" Older affected Pillow versions u...

PT-2026-58089

Name of the Vulnerable Software and Affected Versions Pillow versions 5.2.0 through 12.2.x Description The TGA RLE encoder in the Pillow Python imaging library reads past its packed row buffer when saving a mode 1 image using TGA RLE compression. This behavior allows adjacent process heap bytes t...

PT-2026-49834

we found two new critical vulnerabilities in SAIL, the image decoding library: - CVE-2026-54626 TGA decoder - CVE-2026-54627 PSD decoder both heap out-of-bounds writes CVSS 9.8. responsibly disclosed and now fixed, thanks to the quick reaction of the maintainers...

SUSE CVE-2025-70968

FreeImage 3.18.0 contains a Use After Free in PluginTARGA.cpp;loadRLE...

Linux Distros Unpatched Vulnerability : CVE-2025-70968

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeImage 3.18.0 contains a Use After Free in PluginTARGA.cpp;loadRLE. CVE-2025-70968 Note that Nessus relies on the presence of the package as reported by the...

CVE-2025-70968

A flaw was found in FreeImage. A remote attacker could exploit a Use After Free vulnerability in the PluginTARGA.cpp;loadRLE function. This could lead to arbitrary code execution, resulting in high impact on the confidentiality, integrity, and availability of the affected system...

UBUNTU-CVE-2025-70968

FreeImage 3.18.0 contains a Use After Free in PluginTARGA.cpp;loadRLE...

CVE-2025-70968

FreeImage 3.18.0 contains a Use After Free in PluginTARGA.cpp;loadRLE...

Use After Free

Overview Affected versions of this package are vulnerable to Use After Free via the loadRLE function in PluginTARGA.cpp. An attacker can cause a crash or unintended behavior by providing a specially crafted TGA image with RLE compression enabled. Remediation There is no fixed version for freeimag...

CVE-2025-70968

The FreeImage graphics library, version 3.18.0 , contains a Use After Free vulnerability within the PluginTARGA.cpp file, specifically in the loadRLE() function of the TGA-image loader. This vulnerability occurs when the software attempts to use memory after it has been freed, which could allow a...

CVE-2025-70968

FreeImage 3.18.0 contains a Use After Free in PluginTARGA.cpp;loadRLE...

CVE-2025-70968

FreeImage 3.18.0 contains a Use After Free in PluginTARGA.cpp;loadRLE...

CVE-2025-70968

FreeImage 3.18.0 contains a Use After Free in PluginTARGA.cpp;loadRLE...

PT-2026-2910

Name of the Vulnerable Software and Affected Versions FreeImage version 3.18.0 Description The software contains a Use After Free issue located in the PluginTARGA.cpp file, specifically within the loadRLE function. Recommendations Update to a newer version that contains a fix for this...

CVE-2025-70968

FreeImage 3.18.0 contains a Use After Free in PluginTARGA.cpp;loadRLE...

CVE-2021-47728

Selea Targa IP OCR-ANPR Camera contains an unauthenticated command injection vulnerability in utils.php that allows remote attackers to execute arbitrary shell commands. Attackers can exploit the 'addr' and 'port' parameters to inject commands and gain www-data user access through chained local...

CVE-2021-47730

Selea Targa IP OCR-ANPR Camera contains a cross-site request forgery vulnerability that allows attackers to create administrative users without authentication. Attackers can craft a malicious web page that submits a form to add a new admin user with full system privileges when a logged-in user...

EUVD-2021-34741

Selea Targa IP OCR-ANPR Camera contains a stored cross-site scripting vulnerability in the 'fileslist' parameter that allows attackers to inject malicious HTML and script code. Attackers can send a POST request to /cgi-bin/getfile.php with crafted payload to execute arbitrary scripts in victim's...

EUVD-2021-34740

Selea Targa IP OCR-ANPR Camera contains a hard-coded developer password vulnerability that allows unauthorized configuration access through an undocumented page. Attackers can exploit the hidden endpoint by using the hard-coded password 'Selea781830' to enable configuration upload and overwrite...

EUVD-2021-34742

Selea Targa IP OCR-ANPR Camera contains an unauthenticated command injection vulnerability in utils.php that allows remote attackers to execute arbitrary shell commands. Attackers can exploit the 'addr' and 'port' parameters to inject commands and gain www-data user access through chained local...