CVE-2026-106062

Awaiting Analysis Awaiting Analysis - Queue

Heap Overflow in GIMP DDS Image Loader

Publication date: 2026-10-06

Last updated on: 2026-10-16

Assigner: redhat-SADP

Description

A heap-based buffer overflow was found in GIMP’s DirectDraw Surface (DDS) loader. When loading a crafted DDS image, buffer sizes derived from width, height, and pitch can be computed using 32-bit arithmetic that overflows. The allocated buffer is too small for the amount of pixel data written through GEGL, following integer overflow in size calculations. This may allow heap corruption and, in the worst case, arbitrary code execution in the context of the GIMP process.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-06

Last Modified

2026-10-16

Generated

2026-10-19

AI Q&A

2026-10-07

EPSS Evaluated

2026-10-18

NVD

CVE-2026-106062

Affected Vendors & Products

Vendor	Product	Version / Range
gnome	gimp	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-119	The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Attack-Flow Graph

Executive Summary

This vulnerability is a heap-based buffer overflow in GIMP's DirectDraw Surface (DDS) loader. When processing a specially crafted DDS image, incorrect buffer size calculations using 32-bit arithmetic can overflow. The allocated buffer becomes too small for the pixel data, leading to heap corruption. In severe cases, this may allow arbitrary code execution within the GIMP process.

Detection Guidance

This vulnerability is specific to GIMP's DDS image loading functionality. Detection requires checking for GIMP installations and verifying if they are vulnerable versions. Inspect GIMP's version and configuration files for DDS plugin usage. No direct network detection commands are applicable as this is a local file processing issue.

Impact Analysis

If you open a malicious DDS image in GIMP, the vulnerability could allow an attacker to execute arbitrary code on your system. This might lead to data theft, system compromise, or further malicious activities depending on the attacker's goals. The impact depends on the user's privileges and system configuration.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards as it pertains to a specific software flaw in GIMP's DDS loader. However, if exploited, it could lead to arbitrary code execution, potentially compromising data integrity or confidentiality, which may indirectly impact compliance with data protection regulations.

Mitigation Strategies

Update GIMP to the latest patched version immediately to address the heap-based buffer overflow in the DDS loader. Avoid opening untrusted DDS image files until the update is applied.

Hi! I’m here to help you understand CVE-2026-106062. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70