A flaw was found in the Seattle FilmWorks plugin in GIMP. (CVE-2026-79902)
Description
A vulnerability in the Seattle FilmWorks plugin of GIMP allows an attacker to cause a denial of service by triggering an unbounded stack allocation when processing a specially crafted SFW image file. This occurs due to the plugin allocating a Variable-Length Array (VLA) on the stack without proper integer overflow checks, leading to an application crash.
CVSS v3.1
Score 5.5medium
Affected software
pkg:deb/ubuntu/gimp?arch=source&distro=esm-apps/xenialpkg:deb/ubuntu/gimp?arch=source&distro=esm-apps/bionicpkg:deb/ubuntu/gimp?arch=source&distro=esm-apps/focalpkg:deb/ubuntu/gimp?arch=source&distro=esm-apps/jammypkg:deb/ubuntu/gimp?arch=source&distro=esm-apps/noblepkg:deb/ubuntu/gimp?arch=source&distro=stonkingpkg:deb/ubuntu/gimp?arch=source&distro=resoluteRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-79902 describes a flaw in the Seattle FilmWorks plugin within GIMP where processing a maliciously crafted SFW image file causes the plugin to allocate a Variable-Length Array on the stack without validating for integer overflow. This results in an unbounded stack allocation that crashes the application, causing denial of service. The vulnerability affects multiple specific versions of GIMP as listed, with a CVSS 3.1 base score of 5.5 (medium severity), indicating local attack vector with low complexity and no privileges required but user interaction needed.
Potential Impact
Successful exploitation leads to an application crash resulting in denial of service. There is no impact on confidentiality or integrity reported. The attack requires local access and user interaction to open a crafted image file.
Mitigation Recommendations
No explicit patch or remediation information is provided in the input data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, avoid opening untrusted SFW image files with the Seattle FilmWorks plugin in affected GIMP versions.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- UBUNTU-CVE-2026-79902
- Osv Schema Version
- 1.7.0
- Ecosystems
- ["Ubuntu:Pro:16.04:LTS","Ubuntu:Pro:18.04:LTS","Ubuntu:Pro:20.04:LTS","Ubuntu:Pro:22.04:LTS","Ubuntu:Pro:24.04:LTS","Ubuntu:26.10","Ubuntu:26.04:LTS"]
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6ad3f56b2cdf04f6566620f3
Added to database: 10/17/2026, 22:23:39 UTC
Last enriched: 10/17/2026, 23:36:17 UTC
Last updated: 10/17/2026, 23:36:17 UTC
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.