CVE-2026-106066CWE-119
CVE-2026-106066
Medium · published October 7, 2026
What it is
A heap-based buffer overflow was found in GIMP’s raw data export plug-in. When exporting very large images, g_malloc() sizing based on overflowing width * height * bytes-per-pixel can allocate far less memory than GEGL reads or writes during export, following integer overflow
The record
Technical detail
- CVSS v3.1
- 6.3 · MEDIUM
- Vector
- CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00111 · 1.3th percentile
- Weakness
- CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer
- Published
- 2026-10-07T22:17Z
References (2)
EPSS history
Timeline