Log in Start free

Vulnerability · Published Sep 24, 2026 · Assigned by redhat

CVE-2026-97185Gimp: gimp: out-of-bounds write in gimpressionist plugin via crafted preset file

High 7.8

In plain English

A high-severity out-of-bounds write in Red Hat Enterprise Linux 10 from Red Hat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 3% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.1%top 97.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A flaw was found in GIMP. When processing a specially crafted GIMPressionist preset file, the plug-in does not properly validate vector indices before writing into fixed-size arrays. This can lead to an out-of-bounds write, corrupting memory. An attacker could exploit this by convincing a user to load a malicious preset file, potentially causing a crash or enabling arbitrary code execution.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8gimp2:2.8.22-26.module_el8.10.0+4306+69430cd5.9ALSA-2026:84744
AlmaLinux:9gimp2:3.0.4-4.el9_8.14ALSA-2026:75575
AlmaLinux:8gimp-devel2:2.8.22-26.module_el8.10.0+4306+69430cd5.9ALSA-2026:84744
AlmaLinux:8gimp-devel-tools2:2.8.22-26.module_el8.10.0+4306+69430cd5.9ALSA-2026:84744
AlmaLinux:8gimp-libs2:2.8.22-26.module_el8.10.0+4306+69430cd5.9ALSA-2026:84744
AlmaLinux:9gimp-libs2:3.0.4-4.el9_8.14ALSA-2026:75575
AlmaLinux:8pygobject22.28.7-5.module_el8.10.0+4267+35168c80ALSA-2026:84744
AlmaLinux:8pygobject2-codegen2.28.7-5.module_el8.10.0+4267+35168c80ALSA-2026:84744
AlmaLinux:8pygobject2-devel2.28.7-5.module_el8.10.0+4267+35168c80ALSA-2026:84744
AlmaLinux:8pygobject2-doc2.28.7-5.module_el8.10.0+4267+35168c80ALSA-2026:84744
AlmaLinux:8pygtk22.24.0-25.module_el8.9.0+3725+d1441900ALSA-2026:84744
AlmaLinux:8pygtk2-codegen2.24.0-25.module_el8.9.0+3725+d1441900ALSA-2026:84744
AlmaLinux:8pygtk2-devel2.24.0-25.module_el8.9.0+3725+d1441900ALSA-2026:84744
AlmaLinux:8pygtk2-doc2.24.0-25.module_el8.9.0+3725+d1441900ALSA-2026:84744
AlmaLinux:8python2-cairo1.16.3-7.module_el8.10.0+4267+35168c80ALSA-2026:84744
AlmaLinux:8python2-cairo-devel1.16.3-7.module_el8.10.0+4267+35168c80ALSA-2026:84744
Debian:12gimpno fix listedDEBIAN-CVE-2026-97185
Debian:13gimpno fix listedDEBIAN-CVE-2026-97185
Debian:14gimpno fix listedDEBIAN-CVE-2026-97185
Rocky Linux:8gimp2:2.8.22-26.module+el8.10.0+40033+6fd27379.3RLSA-2026:84744
Rocky Linux:8gimp2:2.8.22-26.module+el8.10.0+40181+ad0e3a65.6RLSA-2026:84744
Rocky Linux:8gimp2:2.8.22-26.module+el8.10.0+1998+a08ccc48.2RLSA-2026:84744
Rocky Linux:8gimp2:2.8.22-26.module+el8.10.0+40134+eab491b1.5RLSA-2026:84744
Rocky Linux:8gimp2:2.8.22-26.module+el8.10.0+40075+a21479b4.4RLSA-2026:84744
Rocky Linux:8gimp2:2.8.22-26.module+el8.10.0+1927+52edb5a0RLSA-2026:84744
Rocky Linux:8gimp2:2.8.22-26.module+el8.10.0+40308+ebf9d253.8RLSA-2026:84744
Rocky Linux:8pygobject20:2.28.7-5.module+el8.10.0+1927+52edb5a0RLSA-2026:84744
Rocky Linux:8pygtk20:2.24.0-25.module+el8.9.0+1723+9bc93544RLSA-2026:84744
Rocky Linux:8python2-pycairo0:1.16.3-7.module+el8.10.0+1927+52edb5a0RLSA-2026:84744
Ubuntu:26.04:LTSgimpno fix listedUBUNTU-CVE-2026-97185
Ubuntu:26.10gimpno fix listedUBUNTU-CVE-2026-97185

Affected products (as reported)

VendorProductVersions
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 9 see references
Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions see references
Red Hat Red Hat Enterprise Linux 10 see references
Red Hat Red Hat Enterprise Linux 6 see references
Red Hat Red Hat Enterprise Linux 7 see references

Weakness: CWE-787 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References