A flaw was found in the file-fits plugin in GIMP. (CVE-2026-66758)

The vulnerability CVE-2026-66758 affects the file-fits plugin in GNOME GIMP. It is caused by a signed 32-bit integer overflow during the calculation of memory allocation size when processing specially crafted FITS image files with large width and height values. This overflow results in an undersized heap buffer, which is subsequently overflowed when pixel data is written, leading to heap-based buffer overflow. The consequences include potential memory corruption, arbitrary code execution, or denial of service. Red Hat has issued security updates for GIMP in their Enterprise Linux 8 and 9 distributions to fix this vulnerability.

Successful exploitation of this vulnerability can lead to memory corruption, which may allow an attacker to execute arbitrary code or cause a denial of service condition. The CVSS v3.1 base score is 7.8, indicating a high severity impact with high confidentiality, integrity, and availability impacts. The attack vector is local with low complexity, no privileges required, and requires user interaction.

Red Hat has released security updates addressing this vulnerability for GIMP in Red Hat Enterprise Linux 8 and 9. Users should apply these official patches as provided by Red Hat to remediate the issue. No additional mitigation steps are indicated by the vendor advisory.