Threats tagged 'ghsa-pqw8-2jmw-8f2c'

FreeImage (danoli3 fork) versions before 3.19.22 contain a heap buffer overflow vulnerability in the PBM RLE decoder within PluginIFF.cpp. The flaw arises due to missing bounds checks on ByteRun1 runs, allowing crafted IFF/LBM PBM files with runs crossing scanline boundaries to write up to 127 bytes beyond the allocated heap buffer. This vulnerability has a high severity rating with a CVSS score of 7.8.