{"id":"CVE-2026-96545","published":"2026-09-23T19:19:54.227","lastModified":"2026-09-24T14:51:56.593","description":"An out-of-bounds heap read flaw was found in GIMP's TIM image loader. When a user opens a crafted 4bpp TIM image that causes promotion to an RGBA layer, the file-tim plug-in allocates an undersized row buffer but processes it using the larger RGBA row size. This can copy adjacent heap contents into the decoded image and may crash the plug-in.","cvssScore":4.4,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cwes":["CWE-125"],"vendors":[],"products":[],"references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-96545","tags":[]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2539597","tags":[]},{"url":"https://gitlab.gnome.org/GNOME/gimp/-/work_items/16791","tags":[]},{"url":"https://gitlab.gnome.org/GNOME/gimp/-/work_items/16791","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}