A flaw was found in the file-iff (IFF/ILBM) plugin in GIMP. (CVE-2026-82324)
Description
A vulnerability in the file-iff (IFF/ILBM) plugin of GIMP allows heap out-of-bounds reads due to improper validation of HAM row size and handling of zero color planes. This flaw can cause application crashes leading to denial of service or limited disclosure of heap memory contents. The issue affects multiple specific versions of GIMP as listed. The CVSS score is 6.1, indicating a medium severity level.
CVSS v3.1
Score 6.1medium
Affected software
pkg:deb/ubuntu/gimp?arch=source&distro=esm-apps/xenialpkg:deb/ubuntu/gimp?arch=source&distro=esm-apps/bionicpkg:deb/ubuntu/gimp?arch=source&distro=esm-apps/focalpkg:deb/ubuntu/gimp?arch=source&distro=esm-apps/jammypkg:deb/ubuntu/gimp?arch=source&distro=esm-apps/noblepkg:deb/ubuntu/gimp?arch=source&distro=stonkingpkg:deb/ubuntu/gimp?arch=source&distro=resoluteRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The file-iff (IFF/ILBM) plugin in GIMP improperly validates the HAM row size and mishandles cases where the number of color planes (nPlanes) is zero when processing specially crafted IFF/ILBM image files. This results in a row size mismatch that bypasses memory bounds checking, causing heap out-of-bounds reads. The flaw can lead to application crashes (denial of service) or limited information disclosure of heap memory contents. The vulnerability is identified as CVE-2026-82324 with a CVSS 3.1 base score of 6.1 (AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H).
Potential Impact
Successful exploitation can cause the GIMP application to crash, resulting in denial of service. Additionally, there is potential for limited disclosure of heap memory contents, which may leak sensitive information. The impact does not include integrity or full confidentiality compromise but can affect availability and partial confidentiality.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, avoid opening untrusted IFF/ILBM image files with GIMP to mitigate risk.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- UBUNTU-CVE-2026-82324
- Osv Schema Version
- 1.7.0
- Ecosystems
- ["Ubuntu:Pro:16.04:LTS","Ubuntu:Pro:18.04:LTS","Ubuntu:Pro:20.04:LTS","Ubuntu:Pro:22.04:LTS","Ubuntu:Pro:24.04:LTS","Ubuntu:26.10","Ubuntu:26.04:LTS"]
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6ad3f5622cdf04f656661c6e
Added to database: 10/17/2026, 22:23:30 UTC
Last enriched: 10/17/2026, 23:32:35 UTC
Last updated: 10/17/2026, 23:32:35 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.