CVE-2026-106065
Received Received - Intake

Heap-based Buffer Overflow in GIMP PCX Export Plugin

Publication date: 2026-10-07

Last updated on: 2026-10-07

Assigner: redhat-SADP

Description
A heap-based buffer overflow was found in GIMP’s PCX export plug-in. For images with extremely large width and height, buffer allocation uses overflowing 32-bit width * height arithmetic while subsequent GEGL operations use the full extent, after integer overflow in size calculation

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-07
Last Modified
2026-10-07
Generated
2026-10-07
AI Q&A
2026-10-07
EPSS Evaluated
N/A
NVD
CVE-2026-106065
EUVD
EUVD-2026-94486

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
gnome gimp *
gnome gimp to 2026-10-07 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-119 The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-106065 is a heap-based buffer overflow in GIMP's PCX export plug-in. When exporting images with extremely large width and height, 32-bit arithmetic overflows during buffer allocation. However, GEGL operations still use the full size, creating a buffer too small for pixel data. This can crash GIMP or corrupt memory.

Detection Guidance

To detect this vulnerability, monitor GIMP for crashes when exporting PCX files with extremely large dimensions. Check GIMP logs for segmentation faults or heap write errors during PCX export operations. Use system monitoring tools to observe memory corruption or crashes when processing large images.

Impact Analysis

Exploiting this flaw requires a user to export a sufficiently large image. It can cause GIMP to crash or corrupt memory, potentially leading to data loss or application instability. Attackers could trigger this by convincing a user to export a maliciously crafted image.

Mitigation Strategies

Immediately restrict PCX export functionality in GIMP to trusted users and enforce reasonable dimension limits for exported images. Update GIMP to the latest patched version if available. Avoid opening or exporting PCX files from untrusted sources until a fix is applied.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-106065. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart