Log in Start free

Vulnerability · Published Sep 14, 2026 · Assigned by redhat

CVE-2026-90947Gimp: gimp: out-of-bounds write in lighting effects plugin via crafted preset file

High 7.8

In plain English

A high-severity out-of-bounds write in Red Hat Enterprise Linux 6 from Red Hat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 3% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.1%top 97.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A flaw was found in GIMP. When processing a specially crafted lighting preset file, the Lighting Effects filter does not properly validate the number of light sources. This can lead to an out-of-bounds write, corrupting memory. An attacker could exploit this by convincing a user to open a malicious preset file, potentially causing a crash or enabling arbitrary code execution.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8gimp2:2.8.22-26.module_el8.10.0+4306+69430cd5.9ALSA-2026:84744
AlmaLinux:9gimp2:3.0.4-4.el9_8.14ALSA-2026:75575
AlmaLinux:8gimp-devel2:2.8.22-26.module_el8.10.0+4306+69430cd5.9ALSA-2026:84744
AlmaLinux:8gimp-devel-tools2:2.8.22-26.module_el8.10.0+4306+69430cd5.9ALSA-2026:84744
AlmaLinux:8gimp-libs2:2.8.22-26.module_el8.10.0+4306+69430cd5.9ALSA-2026:84744
AlmaLinux:9gimp-libs2:3.0.4-4.el9_8.14ALSA-2026:75575
AlmaLinux:8pygobject22.28.7-5.module_el8.10.0+4267+35168c80ALSA-2026:84744
AlmaLinux:8pygobject2-codegen2.28.7-5.module_el8.10.0+4267+35168c80ALSA-2026:84744
AlmaLinux:8pygobject2-devel2.28.7-5.module_el8.10.0+4267+35168c80ALSA-2026:84744
AlmaLinux:8pygobject2-doc2.28.7-5.module_el8.10.0+4267+35168c80ALSA-2026:84744
AlmaLinux:8pygtk22.24.0-25.module_el8.9.0+3725+d1441900ALSA-2026:84744
AlmaLinux:8pygtk2-codegen2.24.0-25.module_el8.9.0+3725+d1441900ALSA-2026:84744
AlmaLinux:8pygtk2-devel2.24.0-25.module_el8.9.0+3725+d1441900ALSA-2026:84744
AlmaLinux:8pygtk2-doc2.24.0-25.module_el8.9.0+3725+d1441900ALSA-2026:84744
AlmaLinux:8python2-cairo1.16.3-7.module_el8.10.0+4267+35168c80ALSA-2026:84744
AlmaLinux:8python2-cairo-devel1.16.3-7.module_el8.10.0+4267+35168c80ALSA-2026:84744
Debian:12gimpno fix listedDEBIAN-CVE-2026-90947
Debian:13gimp3.0.4-3+deb13u11DEBIAN-CVE-2026-90947
Debian:14gimp3.2.6-1DEBIAN-CVE-2026-90947
Rocky Linux:8gimp2:2.8.22-26.module+el8.10.0+40033+6fd27379.3RLSA-2026:84744
Rocky Linux:8gimp2:2.8.22-26.module+el8.10.0+40181+ad0e3a65.6RLSA-2026:84744
Rocky Linux:8gimp2:2.8.22-26.module+el8.10.0+1998+a08ccc48.2RLSA-2026:84744
Rocky Linux:8gimp2:2.8.22-26.module+el8.10.0+40134+eab491b1.5RLSA-2026:84744
Rocky Linux:8gimp2:2.8.22-26.module+el8.10.0+40075+a21479b4.4RLSA-2026:84744
Rocky Linux:8gimp2:2.8.22-26.module+el8.10.0+1927+52edb5a0RLSA-2026:84744
Rocky Linux:8gimp2:2.8.22-26.module+el8.10.0+40308+ebf9d253.8RLSA-2026:84744
Rocky Linux:8pygobject20:2.28.7-5.module+el8.10.0+1927+52edb5a0RLSA-2026:84744
Rocky Linux:8pygtk20:2.24.0-25.module+el8.9.0+1723+9bc93544RLSA-2026:84744
Rocky Linux:8python2-pycairo0:1.16.3-7.module+el8.10.0+1927+52edb5a0RLSA-2026:84744
Ubuntu:26.04:LTSgimpno fix listedUBUNTU-CVE-2026-90947
Ubuntu:26.10gimpno fix listedUBUNTU-CVE-2026-90947

Affected products (as reported)

VendorProductVersions
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 9 see references
Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions see references
Red Hat Red Hat Enterprise Linux 6 see references
Red Hat Red Hat Enterprise Linux 7 see references

Weakness: CWE-787 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References