Vulnerability record/PUBLISHED/Published Oct 7, 2026 16:55:26 UTC
CVE-2026-106065
A heap-based buffer overflow was found in GIMP’s PCX export plug-in. For images with extremely large width and height, buffer allocation uses overflowing 32-bit width * height arithmetic while subsequent GEGL operations use the full extent, after integer overflow in size calculation
Base score6.3/ 10
SeverityMediumCVSS 3.1
Exploitability / impact
CVSS metric breakdown
Base severityMedium
Attack vectorLocalAV
Attack complexityHighAC
Privileges requiredNonePR
User interactionRequiredUI
ScopeUnchangedS
Confidentiality impactNoneC
Integrity impactHighI
Availability impactHighA
CVSS vector string
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:HCVSS communicates standardized severity and impact characteristics. It does not establish whether a system is exploitable in your specific environment.
Record context
CVE Numbering Authorityredhat
Last updatedNov 5, 2026 15:53:58 UTC
PublishedOct 7, 2026 16:55:26 UTC
ReservedOct 6, 2026 14:27:14 UTC
Credits
- Red Hat would like to thank Jim Alves-Foss for reporting this issue.