Code execution via miscalculated DDS scan-line size

Heap buffer overflow in FreeImage 3.18.0 allows context-dependent attackers to execute arbitrary code via a crafted DDS image file. LoadRGB calculates the destination scan-line length from the DDS header bit depth instead of the allocated bitmap's actual bit depth, then reads pixel data past the heap buffer. A user or consuming application must process the attacker-supplied DDS content; the overwrite can crash the process or execute code in its security context.