Gnome Gimp vulnerabilities

CVE-2026-66759 [HIGH] CWE-125 CVE-2026-66759: A flaw was found in the file-icns plugin in GIMP. When applying a decompressed mask during ICNS imag A flaw was found in the file-icns plugin in GIMP. When applying a decompressed mask during ICNS image processing, the plugin reads from the mask data buffer without verifying if the cursor exceeds the allocated resource size. If a crafted file contains a truncated mask resource, the icns_decompress function continues reading past the bounds of the buf

CVE-2026-78475 [MEDIUM] CWE-125 CVE-2026-78475: A flaw was found in the file-pix (ESM) plugin in GIMP. When processing a specially crafted PIX image A flaw was found in the file-pix (ESM) plugin in GIMP. When processing a specially crafted PIX image file, the plugin allocates a Variable-Length Array (VLA) on the stack without proper bounds checking, causing an unbounded stack allocation followed by a 21-byte stack over-read. This can result in a denial of service due to stack exhaustion and a li

CVE-2026-82330 [MEDIUM] CWE-125 CVE-2026-82330: A flaw was found in the file-pvr plugin in GIMP. When processing a specially crafted PVR image file, A flaw was found in the file-pvr plugin in GIMP. When processing a specially crafted PVR image file, the VQ (compressed) decoder does not properly perform memory bounds checking. This missing validation results in a heap out-of-bounds read. This issue can result in an application crash, leading to a denial of service or a limited information disclos

CVE-2026-82324 [MEDIUM] CWE-125 CVE-2026-82324: A flaw was found in the file-iff (IFF/ILBM) plugin in GIMP. When processing a specially crafted IFF/ A flaw was found in the file-iff (IFF/ILBM) plugin in GIMP. When processing a specially crafted IFF/ILBM image file, the plugin does not properly validate the HAM row size and improperly handles cases where the number of color planes (nPlanes) is zero. This causes a row size mismatch that bypasses memory bounds checking, resulting in heap out-of-bou

CVE-2026-79902 [MEDIUM] CWE-190 CVE-2026-79902: A flaw was found in the Seattle FilmWorks plugin in GIMP. When processing a specially crafted SFW im A flaw was found in the Seattle FilmWorks plugin in GIMP. When processing a specially crafted SFW image file, the plugin allocates a Variable-Length Array (VLA) on the stack without integer overflow checks, causing an unbounded stack allocation. This issue leads to an application crash, resulting in a denial of service.