Memory Allocation Issue in GIMP File-SGI Plugin Affects Image Processing
CVE-2026-66757

5.5MEDIUM

Key Information:

Vendor

Red Hat
Status
Red Hat Enterprise Linux 6
Red Hat Enterprise Linux 7
Red Hat Enterprise Linux 8
Red Hat Enterprise Linux 9
Vendor
CVE Published:
27 July 2026

What is CVE-2026-66757?

A vulnerability exists in the file-sgi plugin of GIMP that arises during the processing of RLE-compressed SGI images. The plugin incorrectly allocates memory based on header dimensions (ysize and zsize), which are read as 16-bit unsigned integers. If an attacker crafts an image that sets both dimensions to the maximum value (65535), it leads to an integer overflow during multiplication. This overflow occurs before memory allocation through calloc, resulting in undefined behavior, which can cause the plugin to abort and lead to a denial of service.

References

https://access.redhat.com/security/cve/CVE-2026-66757
vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2507465
issue-trackingx_refsource_REDHAT
https://gitlab.gnome.org/GNOME/gimp/-/work_items/16494

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Red Hat would like to thank Arjun Basnet (Securin) for reporting this issue.
.