CVE-2025-70968

Critical

Published: 14/01/2026(UTC)Translated: 05/08/2026(UTC)NVD NIST

Summary

FreeImage 3.18.0 contains a Use After Free vulnerability in PluginTARGA.cpp in the loadRLE() function. Memory is freed and then accessed again, potentially leading to undefined behavior.

Risk Assessment

Processing specially crafted TARGA files could crash the application or potentially allow code execution, threatening system integrity.

Recommendation

Upgrade FreeImage to a newer version that includes a fix for this vulnerability, if available.

Original NVD description (English source)

FreeImage 3.18.0 contains a Use After Free in PluginTARGA.cpp;loadRLE().