CVE-2026-106066 — Gimp: gimp: heap buffer overflow in raw data export on oversized image dimensions
A heap-based buffer overflow was found in GIMP’s raw data export plug-in. When exporting very large images, g_malloc() sizing based on overflowing width * height * bytes-per-pix…
Published: 2026-10-07 · CVSS: 6.3 · CVSS 3.1
A heap-based buffer overflow was found in GIMP’s raw data export plug-in. When exporting very large images, g_malloc() sizing based on overflowing width * height * bytes-per-pixel can allocate far less memory than GEGL reads or writes during export, following integer overflow
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7