CVE-2026-111149 | danoli3 FreeImage up to 3.19.23 PICT PluginPICT.cpp Unpack32Bits rowBytes out-of-bounds

October 15, 2026 Yanac

A vulnerability classified as critical was found in danoli3 FreeImage up to 3.19.23. This affects the function Unpack32Bits of the file PluginPICT.cpp of the component PICT Handler. The manipulation of the argument rowBytes results in out-of-bounds read.

This vulnerability is known as CVE-2026-111149. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More