Out-of-Bounds Heap Read Vulnerability in GIMP Image Loader
CVE-2026-96545
4.4MEDIUM
What is CVE-2026-96545?
A flaw in the TIM image loader of GIMP could lead to an out-of-bounds heap read when processing specially crafted 4bpp TIM images. Specifically, an undersized row buffer is allocated, yet the processing logic attempts to utilize a larger RGBA row size. This discrepancy can lead to the copying of adjacent heap contents into the resulting image, which may not only cause the plugin to crash but also potentially expose sensitive data.
References
CVSS V3.1
Score:
4.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Upstream acknowledges Spektra as the original reporter.