Skip to content
OpenAdvisories
Critical · 9.8 CVE-2025-70968 EUVD-2026-2456GHSA-m37w-3x8g-3vw4

FreeImage 3.18.0 contains a Use After Free in PluginTARGA.cpp;loadRLE().

Published Jan 14, 2026 · Updated Jan 14, 2026 · Assigned by mitre

Description

FreeImage 3.18.0 contains a Use After Free in PluginTARGA.cpp;loadRLE().

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 13 freeimage No fix yet —
Debian 12 freeimage No fix yet —
ReleasePackageFixed inAdvisory
Ubuntu 26.10 freeimage No fix yet —
Ubuntu 26.04 LTS freeimage No fix yet —
Ubuntu 25.10 freeimage No fix yet —
Ubuntu 24.04 LTS freeimage No fix yet —
Ubuntu 22.04 LTS freeimage No fix yet —
Show 4 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 20.04 LTS freeimage No fix yet —
Ubuntu Pro 18.04 LTS freeimage No fix yet —
Ubuntu Pro 16.04 LTS freeimage No fix yet —
Ubuntu Pro 14.04 LTS freeimage No fix yet —

References