CVE-2026-106063

Awaiting Analysis Awaiting Analysis - Queue

Heap-based Buffer Overflow in GIMP DICOM Export Plug-in

Publication date: 2026-10-06

Last updated on: 2026-10-08

Assigner: redhat-SADP

Description

A heap-based buffer overflow was found in GIMP’s DICOM export plug-in. When exporting an image with extremely large width and height, the export path allocates a buffer using a 32-bit width * height (and bytes-per-pixel) product that can overflow. GEGL then writes the full uncompressed extent into the undersized buffer, after integer overflow in the allocation size

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-06

Last Modified

2026-10-08

Generated

2026-10-19

AI Q&A

2026-10-07

EPSS Evaluated

2026-10-18

NVD

CVE-2026-106063

EUVD

EUVD-2026-93943

Affected Vendors & Products

Vendor	Product	Version / Range
gnome	gimp	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-119	The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Attack-Flow Graph

Executive Summary

This vulnerability is a heap-based buffer overflow in GIMP's DICOM export plug-in. It occurs when exporting an image with extremely large width and height. The export path calculates a buffer size using a 32-bit product of width, height, and bytes-per-pixel, which can overflow. This leads to an undersized buffer being allocated. GEGL then attempts to write the full uncompressed image data into this buffer, causing a buffer overflow.

Detection Guidance

This vulnerability is specific to GIMP's DICOM export plug-in and requires manual testing. Check if GIMP is installed and if the DICOM export plug-in is enabled. Attempt to export an image with extremely large width and height values to trigger the buffer overflow. Monitor for crashes or memory corruption during the export process.

Impact Analysis

This vulnerability could allow an attacker to execute arbitrary code on your system if you attempt to export a maliciously crafted image with extremely large dimensions using GIMP's DICOM export feature. It may also cause crashes or unexpected behavior in GIMP.

Compliance Impact

This vulnerability could potentially impact compliance with standards like GDPR and HIPAA if it leads to unauthorized data access or integrity issues. The heap-based buffer overflow in GIMP's DICOM export plug-in may allow attackers to execute arbitrary code or cause denial of service, which could compromise data confidentiality or availability.

Mitigation Strategies

Update GIMP to the latest version to ensure the DICOM export plug-in is patched. Avoid using GIMP to export images with extremely large width and height until the update is applied.

Hi! I’m here to help you understand CVE-2026-106063. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70