CVE-2026-106062

7.8 HIGH

Published 2026-10-06 · Updated 2026-10-08

AI risk analysis

Summary: A heap-based buffer overflow in GIMP's DDS image loader occurs when processing crafted images with oversized dimensions, leading to integer overflow in buffer size calculations that results in heap corruption and potential arbitrary code execution.
Exploitability: Exploitation requires a user to open a specially crafted DDS image file, making it moderately difficult but possible with social engineering, and relies on the target system having GIMP installed with the vulnerable DDS loader component.
Blast radius: If exploited, this vulnerability could compromise any system running GIMP with the affected DDS loader, potentially affecting graphic designers and artists who frequently work with various image formats.
Detection: No reliable host or network indicator is derivable from the published description.
Prioritized remediation: Upgrade to GIMP version 2.10.32 or later, which includes a fix for this heap-based buffer overflow in the DDS loader component.

rceimageheap-overflow

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

A heap-based buffer overflow was found in GIMP’s DirectDraw Surface (DDS) loader. When loading a crafted DDS image, buffer sizes derived from width, height, and pitch can be computed using 32-bit arithmetic that overflows. The allocated buffer is too small for the amount of pixel data written through GEGL, following integer overflow in size calculations. This may allow heap corruption and, in the worst case, arbitrary code execution in the context of the GIMP process.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses

CWE-119

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.