Vulnerability · Published Aug 3, 2026 · Assigned by redhat

CVE-2026-6695Gimp: gimp: remote code execution via crafted paa file

Medium 5.5

In plain English

A medium-severity security flaw in Red Hat Enterprise Linux 6 from Red Hat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 28% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)5.5Medium

Exploit odds (30 days)0.3%top 72.2% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A flaw was found in GIMP. A remote attacker could exploit this by tricking a user into opening a specially crafted PAA (Paint Shop Pro Array) image file. This vulnerability, a heap-based out-of-bounds write in the decode_lzss() function of the PAA file format plugin, allows data to be written beyond the intended memory buffer. This could lead to heap metadata corruption and potentially enable the attacker to execute arbitrary code on the affected system.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Debian:14	gimp	3.2.4-1	DEBIAN-CVE-2026-6695
Ubuntu:26.04:LTS	gimp	no fix listed	UBUNTU-CVE-2026-6695

Affected products (as reported)

Vendor	Product	Versions
Red Hat	Red Hat Enterprise Linux 6	see references
Red Hat	Red Hat Enterprise Linux 7	see references
Red Hat	Red Hat Enterprise Linux 8	see references
Red Hat	Red Hat Enterprise Linux 9	see references

Weakness: CWE-805 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

References

https://access.redhat.com/security/cve/CVE-2026-6695 vdb-entry, x_refsource_REDHAT
RHBZ#2459780 issue-tracking, x_refsource_REDHAT