CVE-2025-65803

MEDIUM

FreeImage < 3.18.0 - Denial of Service via PSD Image Data Parsing

Title source: llm

Description

An integer overflow in the psdParser::ReadImageData function of FreeImage v3.18.0 and before allows attackers to cause a Denial of Service (DoS) via supplying a crafted PSD file.

References (2)

Core 2

Core References

Product

https://freeimage.sourceforge.io/download.html

Exploit, Issue Tracking, Third Party Advisory

https://gist.github.com/1mxml/cabd6d972557d9d992fe5f4f6ca1dd87

Scores

CVSS v3 6.5

EPSS 0.0025

EPSS Percentile 15.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-190

Status published

Products (1)

freeimage_project/freeimage < 3.18.0

Published Dec 10, 2025

Tracked Since Feb 18, 2026