Heap-Based Buffer Overflow in GIMP’s DirectDraw Surface Loader
CVE-2026-106062

7.8HIGH

Key Information:

Vendor

Red Hat
Status
Red Hat Enterprise Linux 10
Red Hat Enterprise Linux 6
Red Hat Enterprise Linux 7
Red Hat Enterprise Linux 8
Vendor
CVE Published:
6 October 2026

What is CVE-2026-106062?

A heap-based buffer overflow vulnerability exists in GIMP's DirectDraw Surface (DDS) loader, where specially crafted DDS images can cause incorrect buffer size calculations, leading to potential heap corruption. This is triggered through integer overflow during size calculations based on image dimensions. Attackers could exploit this flaw to execute arbitrary code within the GIMP environment, posing significant security risks for users of affected versions.

References

https://access.redhat.com/security/cve/CVE-2026-106062
vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2546654
issue-trackingx_refsource_REDHAT

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Red Hat would like to thank Jim Alves-Foss for reporting this issue.
.