CVE-2015-0852: Freeimage Project Freeimage

Medium severity, CVSS 5.0. EPSS: 3% chance of exploitation in the next 30 days.

Multiple integer underflows in PluginPCX.cpp in FreeImage 3.17.0 and earlier allow remote attackers to cause a denial of service (heap memory corruption) via vectors related to the height and width of a window.

Affected products

• Freeimage Project Freeimage: up to and including 3.17.0

Published 2015-09-29. Last modified 2026-06-17.