EUVD-2026-112496

FreeImage danoli3 fork before 3.19.22 contains a heap buffer overflow vulnerability in the PBM RLE decoder of PluginIFF.cpp that lacks bounds checks on ByteRun1 runs. Attackers can supply a crafted IFF/LBM PBM file with runs straddling scanline ends to write up to 127 controlled bytes past the...

Linux Distros Unpatched Vulnerability : CVE-2026-118752

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeImage danoli3 fork before 3.19.22 contains a heap buffer overflow vulnerability in the PBM RLE decoder of PluginIFF.cpp that lacks bounds checks on ByteRun1...

AlmaLinux 9.6 [TuxCare] Security Update: emacs / emacs-common / emacs-devel / emacs-filesystem / emacs-lucid / etc (ALMALINUX9.6:CLSA-2026:1793305644)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793305644 advisory. - GNU Emacs before 31.0.91 contains an integer overflow in the PBM/PPM/PGM image loader that allows an attacker to leak heap memory contents ...

Rocky Linux 9.6 [TuxCare] Security Update: emacs / emacs-common / emacs-devel / emacs-filesystem / emacs-lucid / etc (ALMALINUX9.6:CLSA-2026:1793305644)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793305644 advisory. - GNU Emacs before 31.0.91 contains an integer overflow in the PBM/PPM/PGM image loader that allows an attacker to leak heap memory content...

UBUNTU-CVE-2026-118752

FreeImage danoli3 fork before 3.19.22 contains a heap buffer overflow vulnerability in the PBM RLE decoder of PluginIFF.cpp that lacks bounds checks on ByteRun1 runs. Attackers can supply a crafted IFF/LBM PBM file with runs straddling scanline ends to write up to 127 controlled bytes past the...

CVE-2026-118752

FreeImage danoli3 fork before 3.19.22 contains a heap buffer overflow vulnerability in the PBM RLE decoder of PluginIFF.cpp that lacks bounds checks on ByteRun1 runs. Attackers can supply a crafted IFF/LBM PBM file with runs straddling scanline ends to write up to 127 controlled bytes past the...

CVE-2026-118752

FreeImage through 3.18.0 and the danoli3 FreeImage fork before 3.19.22 contain a heap buffer overflow vulnerability in the PBM RLE decoder of PluginIFF.cpp that lacks bounds checks on ByteRun1 runs. Attackers can supply a crafted IFF/LBM PBM file with runs straddling scanline ends to write up to...

CVE-2026-118752

FreeImage danoli3 fork before 3.19.22 contains a heap buffer overflow vulnerability in the PBM RLE decoder of PluginIFF.cpp that lacks bounds checks on ByteRun1 runs. Attackers can supply a crafted IFF/LBM PBM file with runs straddling scanline ends to write up to 127 controlled bytes past the...

CVE-2026-118752

The FreeImage (danoli3 fork) software before version 3.19.22 is vulnerable to a heap buffer overflow in the PBM RLE decoder of PluginIFF.cpp. The root cause is a lack of bounds checks on ByteRun1 runs , allowing an attacker to provide a crafted IFF/LBM PBM file with runs straddling scanline ends....

CVE-2026-118752 FreeImage through 3.18.0 and danoli3 fork before 3.19.22 Heap Buffer Overflow via IFF/LBM PBM RLE Decoder

FreeImage through 3.18.0 and the danoli3 FreeImage fork before 3.19.22 contain a heap buffer overflow vulnerability in the PBM RLE decoder of PluginIFF.cpp that lacks bounds checks on ByteRun1 runs. Attackers can supply a crafted IFF/LBM PBM file with runs straddling scanline ends to write up to...

CVE-2026-118752 FreeImage through 3.18.0 and danoli3 fork before 3.19.22 Heap Buffer Overflow via IFF/LBM PBM RLE Decoder

FreeImage through 3.18.0 and the danoli3 FreeImage fork before 3.19.22 contain a heap buffer overflow vulnerability in the PBM RLE decoder of PluginIFF.cpp that lacks bounds checks on ByteRun1 runs. Attackers can supply a crafted IFF/LBM PBM file with runs straddling scanline ends to write up to...

PT-2026-129198

FreeImage danoli3 fork before 3.19.22 contains a heap buffer overflow vulnerability in the PBM RLE decoder of PluginIFF.cpp that lacks bounds checks on ByteRun1 runs. Attackers can supply a crafted IFF/LBM PBM file with runs straddling scanline ends to write up to 127 controlled bytes past the...

CVE-2026-118752: danoli3, FreeImage FreeImage: FreeImage (danoli3 fork) before 3.19.22 contains a heap buffer overflow vulnerability in the PBM RLE decoder of…

FreeImage danoli3 fork before 3.19.22 contains a heap buffer overflow vulnerability in the PBM RLE decoder of PluginIFF.cpp that lacks bounds checks on ByteRun1 runs. Attackers can supply a crafted IFF/LBM PBM file with runs straddling scanline ends to write up to 127 controlled bytes past the...

Dan Rosser FreeImage buffer error vulnerability

Dan Rosser: Versions of FreeImage prior to 3.19.22 contain a buffer error vulnerability. This vulnerability arises because the PBM RLE decoder in PluginIFF.cpp fails to perform boundary checks on ByteRun1 operations, potentially leading to a heap buffer overflow. Attackers can exploit this by...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: emacs (UTSA-2026-142368)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142368 advisory. GNU Emacs before 31.0.91 contains an integer overflow in the PBM/PPM/PGM image loader that allows an attacker to leak heap memory contents by supplying a crafted ima...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: emacs (UTSA-2026-142309)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142309 advisory. GNU Emacs before 31.0.91 contains an integer overflow in the PBM/PPM/PGM image loader that allows an attacker to leak heap memory contents by supplying a crafted ima...

CLSA-2026-1792080478 emacs: Fix of 3 CVEs

CVE-2026-77219: fix integer overflow in PBM image loader - CVE-2026-79992: restrict Tramp user names to prevent shell command injection - CVE-2026-108976: strengthen Tramp user and host name validation...

Astra Linux – Vulnerability in DjVuLibre

In DjVuLibre 3.5.27, the sorting functionality also known as GArrayTemplate::sort allows attackers to cause a denial-of-service attack, resulting in an application crash due to uncontrolled recursion. This can occur when a PBM image file is mishandled in the libdjvu/GContainer.h header file...

Oracle Linux 8 : emacs (ELSA-2026-80506)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-80506 advisory. - Fix TRAMP user name shell injection vulnerability CVE-2026-79992 - Fix integer overflow in PBM image loader CVE-2026-77219 Tenable has extracted the...

emacs: GNU Emacs: Heap over-read leading to information disclosure via crafted image

A flaw was found in GNU Emacs. An integer overflow in the PBM/PPM/PGM image loader allows a remote attacker to leak heap memory contents. By supplying a specially crafted image with large dimensions and an elevated maximum color index, the image loader's internal calculations can wrap to a negati...