CVE-2026-118753— FreeImage (danoli3 fork) before 3.19.25 Heap Buffer Overflow via GIF_PLAYBACK Compositing

Quick assessment

Affected

danoli3 FreeImage

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

FreeImage（danoli3 分支版本）在 3.19.25 之前存在一个堆缓冲区溢出漏洞，该漏洞位于 PluginGIF.cpp 文件中。攻击者可利用未裁剪的 GIF 帧矩形，将数据写入画布分配区域之外。攻击者可以构造一个 GIF 文件，使其帧的左边缘坐标加上宽度超出逻辑屏幕宽度；当该文件以 GIF_PLAYBACK 模式加载时，GifPlaybackCompositeFrame() 和 GifPlaybackFillRect() 函数将导致堆内存被破坏。

CVSS 7.8 · High Updated Oct 29, 2026

Possible ATT&CK Techniques 1 AI

T1203 · Exploitation for Client Execution

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

FreeImage (danoli3 fork) before 3.19.25 Heap Buffer Overflow via GIF_PLAYBACK Compositing

Source: CVE Program / CVE List V5

Vulnerability Description

FreeImage (danoli3 fork) before 3.19.25 contains a heap buffer overflow vulnerability in PluginGIF.cpp that allows attackers to write past the canvas allocation via unclipped GIF frame rectangles. Attackers can craft a GIF whose frame left plus width exceeds the logical screen width, causing GifPlaybackCompositeFrame() and GifPlaybackFillRect() to corrupt heap memory when loaded with GIF_PLAYBACK.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Source: CVE Program / CVE List V5

Vulnerability Type

跨界内存写

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
danoli3	FreeImage	0 ~ 3.19.25	-
FreeImage	FreeImage	0 ~ 3.18.0	-

II. Public POCs for CVE-2026-118753

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-118753

请登录查看更多情报信息。

Other References for CVE-2026-118753 (1)

🔗 GitHub - danoli3/FreeImage: FreeImage library - With Fixes for ALL PLATFORMS · GitHub product

Other References for CVE-2026-118753 (6)

https://github.com/danoli3/FreeImage/commit/0da5ddb4d311e5222251348cca1aa988478b1034 patch
https://github.com/danoli3/FreeImage/blob/3.19.24/Source/FreeImage/PluginGIF.cpp#L719-L772 technical-description
https://github.com/danoli3/FreeImage/commit/96f4099f8e307484ba69b4aa14d772b7679a1bfb patch
https://github.com/danoli3/FreeImage/pull/183 issue-tracking patch
https://github.com/danoli3/FreeImage/releases/tag/3.19.25 release-notes
https://www.vulncheck.com/advisories/freeimage-danoli3-fork-before-3.19.25-heap-buffer-overflow-via-gif-playback-compositing third-party-advisory

https://www.cve.org/CVERecord?id=CVE-2026-118753

IV. Related Vulnerabilities

Same product: FreeImage

Same vendor: danoli3

Same weakness: CWE-787