CVE-2025-70968

freeimage: FreeImage: Arbitrary code execution via Use After Free in PluginTARGA.cpp;loadRLE()

View on CVE.org
Published Jan 14, 2026 CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Description
FreeImage 3.18.0 contains a Use After Free in PluginTARGA.cpp;loadRLE().

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
CPEs cpe:2.3:a:freeimage_project:freeimage:3.18.0:*:*:*:*:*:*:*
Type Values Removed Values Added
First Time appeared Freeimage Project
Freeimage Project freeimage
Vendors & Products Freeimage Project
Freeimage Project freeimage
Type Values Removed Values Added
Title freeimage: FreeImage: Arbitrary code execution via Use After Free in PluginTARGA.cpp;loadRLE()
References
Metrics threat_severity

None

 threat_severity

Important
Type Values Removed Values Added
Weaknesses CWE-416
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}
Type Values Removed Values Added
Description FreeImage 3.18.0 contains a Use After Free in PluginTARGA.cpp;loadRLE().
References
Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Jan 14, 2026, 4:31 PM
Reserved
Jan 9, 2026, 12:00 AM

View source JSON

Updated
Jan 14, 2026, 4:31 PM

JSON

Status
Analyzed
Published
Jan 14, 2026, 5:16 PM
Modified
Jun 17, 2026, 10:03 AM

View source JSON

Severity
Important
Public date
Jan 14, 2026, 12:00 AM

View source Bugzilla JSON

Updated
Jan 15, 2026, 8:03 AM

JSON