CVE-2026-106061
5.5 MEDIUMPublished 2026-10-07 · Updated 2026-10-09
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
A flaw was found in GIMP’s X cursor (XMC) thumbnail loader. When GIMP generates a thumbnail for a crafted XMC file, it allocates a pixel buffer using a width * height size computed in 32-bit signed arithmetic. If that product overflows, the allocation is smaller than the true image extent. A subsequent GEGL buffer read uses the unwrapped dimensions and performs an out-of-bounds read on the heap, after integer overflow in the size calculation. This can crash GIMP or corrupt process memory.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weaknesses
CWE-125
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- LOWCVE-2024-58392PoC
- MEDIUMCVE-2024-58397PoC
- MEDIUMCVE-2026-100126
- MEDIUMCVE-2026-100130
- MEDIUMCVE-2026-100131
- HIGHCVE-2026-100387PoC
- MEDIUMCVE-2026-100505PoC
- MEDIUMCVE-2026-101204
Related by shared AI tags and CWE weakness class. Browse the full archive.