Log in Start free

Vulnerability · Published Oct 6, 2026 · Assigned by redhat

CVE-2026-106062Gimp: gimp: heap buffer overflow in dds loader on crafted directdraw surface file

High 7.8

In plain English

A high-severity memory corruption in Red Hat Enterprise Linux 10 from Red Hat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 5% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.2%top 95.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A heap-based buffer overflow was found in GIMP’s DirectDraw Surface (DDS) loader. When loading a crafted DDS image, buffer sizes derived from width, height, and pitch can be computed using 32-bit arithmetic that overflows. The allocated buffer is too small for the amount of pixel data written through GEGL, following integer overflow in size calculations. This may allow heap corruption and, in the worst case, arbitrary code execution in the context of the GIMP process.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:9gimp2:3.0.4-4.el9_8.15ALSA-2026:93975
AlmaLinux:9gimp-libs2:3.0.4-4.el9_8.15ALSA-2026:93975
Debian:12gimpno fix listedDEBIAN-CVE-2026-106062
Debian:13gimpno fix listedDEBIAN-CVE-2026-106062
Debian:14gimpno fix listedDEBIAN-CVE-2026-106062
Ubuntu:26.04:LTSgimpno fix listedUBUNTU-CVE-2026-106062
Ubuntu:26.10gimpno fix listedUBUNTU-CVE-2026-106062

Affected products (as reported)

VendorProductVersions
Red Hat Red Hat Enterprise Linux 9 see references
Red Hat Red Hat Enterprise Linux 10 see references
Red Hat Red Hat Enterprise Linux 6 see references
Red Hat Red Hat Enterprise Linux 7 see references
Red Hat Red Hat Enterprise Linux 8 see references

Weakness: CWE-119 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References