CVE-2026-96545
Received Received - Intake

Heap Out-of-Bounds Read in GIMP TIM Image Loader

Publication date: 2026-09-23

Last updated on: 2026-09-23

Assigner: redhat-SADP

Description
An out-of-bounds heap read flaw was found in GIMP's TIM image loader. When a user opens a crafted 4bpp TIM image that causes promotion to an RGBA layer, the file-tim plug-in allocates an undersized row buffer but processes it using the larger RGBA row size. This can copy adjacent heap contents into the decoded image and may crash the plug-in.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-23
Last Modified
2026-09-23
Generated
2026-09-24
AI Q&A
2026-09-23
EPSS Evaluated
N/A
NVD
CVE-2026-96545
EUVD
EUVD-2026-85539

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
gnome gimp *
gnome gimp From 3.2.6 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-125 The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an out-of-bounds heap read flaw in GIMP's TIM image loader. When a user opens a specially crafted 4bpp TIM image that gets promoted to an RGBA layer, the plugin allocates a row buffer that is too small. It then processes this buffer using the larger RGBA row size, causing adjacent heap memory to be copied into the decoded image and potentially crashing the plugin.

Detection Guidance

This vulnerability is specific to GIMP's TIM image loader and requires manual inspection of GIMP installations and image files. Check if GIMP is installed and if the version is vulnerable. Inspect TIM images for unusual behavior during loading.

Impact Analysis

This flaw may allow an attacker to read sensitive data from adjacent memory locations in the heap. If exploited, it could crash the GIMP application or leak information, though it requires user interaction to open a malicious file.

Mitigation Strategies

Update GIMP to the latest version to patch the flaw. Avoid opening untrusted TIM images until patched. If immediate patching is not possible, disable the TIM file loader plugin in GIMP.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-96545. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart