A flaw was found in GIMP’s X cursor (XMC) thumbnail loader. (CVE-2026-106061)

The flaw exists in GIMP's X cursor (XMC) thumbnail loader where the pixel buffer allocation uses a width * height size computed with 32-bit signed arithmetic. If this multiplication overflows, the allocated buffer is smaller than required. Subsequently, a GEGL buffer read uses the unwrapped dimensions, resulting in an out-of-bounds read on the heap. This vulnerability can lead to application crashes or memory corruption. The vulnerability is identified as CVE-2026-106061 and affects numerous specific GIMP versions listed in the affectedVersions field.

Exploitation of this vulnerability can cause GIMP to crash or corrupt its process memory due to out-of-bounds heap reads. There is no indication of confidentiality or integrity impact, and no known exploits in the wild have been reported. The impact is limited to availability and potential stability issues of the GIMP application.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided in the available data. Users should monitor vendor communications for updates and avoid opening untrusted XMC files until a fix is available.