A heap-based buffer overflow vulnerability exists in the GIMP DDS (DirectDraw Surface) file parser. (CVE-2026-42170)
A heap-based buffer overflow vulnerability exists in the GIMP DDS file parser when a crafted DDS file declares a D3D9 pixel format but sets a lower bits-per-pixel value, causing an undersized heap buffer allocation. This leads to a write past the heap buffer boundary, resulting in heap metadata corruption and potential code execution. The vulnerability is triggered when a user opens a specially crafted DDS image file with GIMP. Red Hat Enterprise Linux systems with GIMP installed are affected if users process untrusted DDS files. Users are advised to avoid opening untrusted DDS files or remove the GIMP package if not needed.
AI Analysis
Technical Summary
CVE-2026-42170 is a heap-based buffer overflow vulnerability in the GIMP DDS (DirectDraw Surface) file parser. The flaw occurs when a crafted DDS file declares a D3D9 pixel format but specifies a lower bits-per-pixel (bpp) value in the header, causing the loader to allocate an undersized heap buffer. Subsequent pixel data processing at the actual format's stride writes beyond the allocated buffer boundary, corrupting heap metadata and potentially enabling code execution. This vulnerability is triggered locally when a user opens a malicious DDS image file with GIMP. Red Hat Enterprise Linux systems with GIMP installed are affected if untrusted DDS files are processed. No official fix or patch is currently available according to the vendor advisory. Mitigation involves avoiding opening untrusted DDS files or removing the GIMP package if not required.
Potential Impact
Successful exploitation can lead to heap metadata corruption and potential arbitrary code execution, compromising confidentiality, integrity, and availability of the affected system. The vulnerability requires local access and user interaction to open a crafted DDS file. The CVSS v3.1 base score is 7.8 (High), reflecting high impact on confidentiality, integrity, and availability.
Mitigation Recommendations
No official patch or fix is currently available. Users should avoid opening untrusted DirectDraw Surface (DDS) image files with GIMP. As a security best practice, only process DDS files from trusted sources. If GIMP is not essential, consider removing the 'gimp' package to eliminate this attack vector. Monitor the vendor advisory for updates regarding patches or fixes.
A heap-based buffer overflow vulnerability exists in the GIMP DDS (DirectDraw Surface) file parser. (CVE-2026-42170)
Description
A heap-based buffer overflow vulnerability exists in the GIMP DDS file parser when a crafted DDS file declares a D3D9 pixel format but sets a lower bits-per-pixel value, causing an undersized heap buffer allocation. This leads to a write past the heap buffer boundary, resulting in heap metadata corruption and potential code execution. The vulnerability is triggered when a user opens a specially crafted DDS image file with GIMP. Red Hat Enterprise Linux systems with GIMP installed are affected if users process untrusted DDS files. Users are advised to avoid opening untrusted DDS files or remove the GIMP package if not needed.
CVSS v3.1
Score 7.8high
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-42170 is a heap-based buffer overflow vulnerability in the GIMP DDS (DirectDraw Surface) file parser. The flaw occurs when a crafted DDS file declares a D3D9 pixel format but specifies a lower bits-per-pixel (bpp) value in the header, causing the loader to allocate an undersized heap buffer. Subsequent pixel data processing at the actual format's stride writes beyond the allocated buffer boundary, corrupting heap metadata and potentially enabling code execution. This vulnerability is triggered locally when a user opens a malicious DDS image file with GIMP. Red Hat Enterprise Linux systems with GIMP installed are affected if untrusted DDS files are processed. No official fix or patch is currently available according to the vendor advisory. Mitigation involves avoiding opening untrusted DDS files or removing the GIMP package if not required.
Potential Impact
Successful exploitation can lead to heap metadata corruption and potential arbitrary code execution, compromising confidentiality, integrity, and availability of the affected system. The vulnerability requires local access and user interaction to open a crafted DDS file. The CVSS v3.1 base score is 7.8 (High), reflecting high impact on confidentiality, integrity, and availability.
Mitigation Recommendations
No official patch or fix is currently available. Users should avoid opening untrusted DirectDraw Surface (DDS) image files with GIMP. As a security best practice, only process DDS files from trusted sources. If GIMP is not essential, consider removing the 'gimp' package to eliminate this attack vector. Monitor the vendor advisory for updates regarding patches or fixes.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-h29x-j2gq-hpv4
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-42170"]
- Ecosystems
- []
- Database Specific Severity
- HIGH
- Cvss Version
- 3.1
Threat ID: 6a7891d6bf8831d539c86e5d
Added to database: 08/09/2026, 14:42:30 UTC
Last enriched: 08/09/2026, 14:50:55 UTC
Last updated: 08/09/2026, 17:40:59 UTC
Views: 6
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.