CVE-2026-78475

Name
CVE-2026-78475
Description
A flaw was found in the file-pix (ESM) plugin in GIMP. When processing a specially crafted PIX image file, the plugin allocates a Variable-Length Array (VLA) on the stack without proper bounds checking, causing an unbounded stack allocation followed by a 21-byte stack over-read. This can result in a denial of service due to stack exhaustion and a limited information disclosure of stack memory contents into an intermediate file.
NVD Severity
unknown
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
secalert@redhat.com https://access.redhat.com/security/cve/CVE-2026-78475
secalert@redhat.com https://bugzilla.redhat.com/show_bug.cgi?id=2522072
secalert@redhat.com https://gitlab.gnome.org/GNOME/gimp/-/work_items/16580

Match rules

CPE URI Source package Min version Max version
cpe:2.3:a:gimp:gimp:*:*:*:*:*:*:*:* gimp >= 3.0.0 <= 3.3.1

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
gimp edge-community 3.2.4-r1 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
gimp edge-community 3.2.4-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
gimp edge-community 3.2.0-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
gimp edge-community 3.0.4-r1 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
gimp edge-community 3.0.4-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
gimp edge-community 3.0.2-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
gimp edge-community 3.0.0-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
gimp 3.24-community 3.2.4-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable