A heap-based buffer overflow was found in GIMP’s DICOM export plug-in. (CVE-2026-106063)

The vulnerability is a heap-based buffer overflow in GIMP's DICOM export plug-in triggered by exporting images with very large width and height. The export path calculates the buffer size using a 32-bit multiplication of width, height, and bytes per pixel, which can overflow and result in an undersized buffer allocation. Subsequently, GEGL writes the full uncompressed image data into this undersized buffer, causing a heap overflow.

Successful exploitation can lead to memory corruption, which may cause application crashes or potentially allow an attacker to execute arbitrary code with the privileges of the user running GIMP. The CVSS vector indicates local attack vector with high attack complexity, no privileges required, and user interaction needed. The impact includes high integrity and availability impact but no confidentiality impact.

No explicit patch or remediation details are provided in the input data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, avoid exporting extremely large images using the DICOM export plug-in or limit image dimensions to prevent triggering the integer overflow.