PT-2026-2910 · Freeimage · Freeimage

Published 2026-01-07 · Updated 2026-01-23 · CVE-2025-70968

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions FreeImage version 3.18.0

Description FreeImage 3.18.0 contains a Use After Free issue in the PluginTARGA.cpp file, specifically within the loadRLE() function. This issue occurs during TARGA image processing.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2026-01843

CVE-2025-70968

Affected Products

Freeimage

References · 15

• 🔥 https://github.com/MiracleWolf/FreeimageCrash/tree/main · Exploit
• https://osv.dev/vulnerability/CVE-2025-70968 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-70968 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-70968 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-70968 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-01843 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2025-70968 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-70968 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-70968 · Security Note
• https://t.me/cveNotify/149673 · Telegram Post
• https://twitter.com/pulsepatchio/status/2011808422237225109 · Twitter Post
• https://twitter.com/TheHackerWire/status/2011498713009782997 · Twitter Post
• https://twitter.com/CveFindCom/status/2011493289233469741 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2011679837182714047 · Twitter Post
• https://twitter.com/CVEnew/status/2011759605588668609 · Twitter Post