CVE-2025-70968

FreeImage 3.18.0 contains a Use After Free in PluginTARGA.cpp;loadRLE()

Critical · published January 14, 2026

CVSS v3.1
9.8
EPSS
1%
Percentile
43.7
In the wild
Unconfirmed
What it is

🚨 A pesky use-after-free vulnerability in FreeImage 3.18.0 could lead to devastating exploits! Just think of it as a party where the guest list hasn’t updated, letting uninvited guests wreak havoc. 🔥 Imagine you’ve got a party at your house and forget to remove a few old names from the guest list. Those names could still gain entry, causing chaos among your real guests. This vulnerability in FreeImage behaves similarly, allowing attackers to exploit memory space that's been released but not properly cleared. An attacker could leverage this vulnerability to execute arbitrary code, potentially taking complete control of the affected system. It's like letting a stranger perform on stage while your real performers are sidelined! The consequences could be absolutely devastating, including data leaks and system compromises.

Put simply

Imagine you’ve got a party at your house and forget to remove a few old names from the guest list. Those names could still gain entry, causing chaos among your real guests. This vulnerability in FreeImage behaves similarly, allowing attackers to exploit memory space that's been released but not properly cleared. This use-after-free vulnerability is located in the PluginTARGA.cpp;loadRLE() function of FreeImage 3.18.0, allowing attackers to manipulate memory that has already been freed, leading to unexpected behavior or malicious code execution.

What to do

An attacker could leverage this vulnerability to execute arbitrary code, potentially taking complete control of the affected system. It's like letting a stranger perform on stage while your real performers are sidelined! The consequences could be absolutely devastating, including data leaks and system compromises. To protect your systems, immediately upgrade FreeImage to the latest version where this vulnerability is patched. Implement proper memory management practices in your code and consider performing thorough code audits to catch similar issues. 🛡️ You've got this! By taking swift action, you’ll bolster your defenses and keep your systems safe! 💪✨

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00525 · 43.7th percentile
Published
2026-01-14T00:00Z
EPSS history
Timeline
  • 14 JAN 00:00Z
    FreeImage 3.18.0 contains a Use After Free in PluginTARGA.cpp;loadRLE()
    cvelistv5