CVE-2026-42170
Received Received - Intake

Heap Overflow in GIMP DDS File Parser

Publication date: 2026-08-08

Last updated on: 2026-08-08

Assigner: Red Hat, Inc.

Description
A heap-based buffer overflow vulnerability exists in the GIMP DDS (DirectDraw Surface) file parser. When a crafted DDS file declares a D3D9 pixel format but sets a lower bits-per-pixel (bpp) value in the header, the loader allocates an undersized heap buffer. Subsequent pixel data consumption at the real format's stride causes a write past the heap buffer boundary, leading to heap metadata corruption and potential code execution.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-08
Last Modified
2026-08-08
Generated
2026-08-08
AI Q&A
2026-08-08
EPSS Evaluated
N/A
NVD
CVE-2026-42170
EUVD
EUVD-2026-54792

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
gnome gimp *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-131 The product does not correctly calculate the size to be used when allocating a buffer, which could lead to a buffer overflow.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-42170 is a heap-based buffer overflow in GIMP's DDS file parser. It occurs when a malicious DDS file declares a D3D9 pixel format but sets a lower bits-per-pixel value in the header. This causes the loader to allocate an undersized heap buffer. When processing pixel data, the actual stride exceeds the buffer size, leading to a write past the heap boundary. This can corrupt heap metadata and potentially allow arbitrary code execution.

Detection Guidance

Detecting this vulnerability requires checking for GIMP installations and monitoring for suspicious DDS file processing. Inspect GIMP versions with 'rpm -qa | grep gimp' or 'dpkg -l | grep gimp'. Scan for unusual heap corruption events in system logs or use tools like Valgrind to monitor GIMP's DDS plugin for buffer overflows.

Impact Analysis

If you open a crafted DDS file with GIMP, this vulnerability could allow attackers to execute arbitrary code on your system. This may lead to data theft, system compromise, or further malware installation. The impact depends on your system's privileges and whether GIMP processes untrusted files.

Compliance Impact

This vulnerability could indirectly impact compliance with GDPR or HIPAA by enabling arbitrary code execution through malicious DDS files. If exploited, it may lead to unauthorized data access, modification, or exfiltration, violating confidentiality and integrity requirements in these regulations.

Mitigation Strategies

Avoid opening untrusted DDS files. If GIMP is not essential, remove it with 'dnf remove gimp' or 'apt-get remove gimp'. If GIMP must be kept, ensure only trusted DDS files are processed. Monitor Red Hat's updates for official patches.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-42170. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart