CVE-2026-6695CWE-805

CVE-2026-6695

Medium · published August 3, 2026

CVSS v3.1
5.5
EPSS
0%
Percentile
14.6
In the wild
Unconfirmed
What it is

A flaw was found in GIMP. A remote attacker could exploit this by tricking a user into opening a specially crafted PAA (Paint Shop Pro Array) image file. This vulnerability, a heap-based out-of-bounds write in the decode_lzss() function of the PAA file format plugin, allows data to be written beyond the intended memory buffer. This could lead to heap metadata corruption and potentially enable the attacker to execute arbitrary code on the affected system.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00236 · 14.6th percentile
Weakness
CWE-805 · Buffer Access with Incorrect Length Value
Published
2026-08-03T10:16Z
Affected products (5)
ProductVersionsFixed in
gimp/gimpall versions—
redhat/enterprise_linuxall versions—
redhat/enterprise_linuxall versions—
redhat/enterprise_linuxall versions—
redhat/enterprise_linuxall versions—
References (2)
https://access.redhat.com/security/cve/CVE-2026-6695 · [email protected]https://bugzilla.redhat.com/show_bug.cgi?id=2459780 · [email protected]
EPSS history
Timeline
  • 03 AUG 04:05Z
    Gimp: gimp: remote code execution via crafted paa file
    cvelistv5