Heap-based Buffer Overflow in GIMP's PCX Plugin for 32-bit Builds
CVE-2026-78465
7HIGH
What is CVE-2026-78465?
A flaw exists in the file-pcx plugin of GIMP, specifically impacting 32-bit builds. This vulnerability arises when processing a specially crafted PCX image file, where an integer overflow occurs during memory allocation size calculations. By setting an unusually high number of color planes, the resulting dimensions exceed safe integer limits, leading to an undersized heap-based buffer allocation. Subsequently, when the plugin attempts to write the image data into this insufficient buffer, it triggers memory corruption. This vulnerability poses a risk of arbitrary code execution or denial of service, highlighting the critical need for patching affected versions of the GIMP software.
References
CVSS V3.1
Score:
7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Red Hat would like to thank Zhixi "Jace" Sun for reporting this issue.