A heap-based buffer overflow was found in GIMP’s GIF export plug-in. (CVE-2026-106064)

CVE-2026-106064 describes a heap-based buffer overflow in the GIF export plug-in of GIMP. The vulnerability arises from an integer overflow when computing the pixel buffer size for images with very large width and height. The plug-in allocates memory based on the wrapped (overflowed) value, but the GEGL library writes pixels according to the true image extent, resulting in a heap overflow. This flaw can be triggered by exporting specially crafted large images.

The vulnerability can lead to a heap-based buffer overflow, which may cause application crashes or potentially allow an attacker to execute arbitrary code or corrupt memory. The CVSS score of 6.3 (medium severity) reflects the local attack vector with high complexity, no privileges required, user interaction needed, and impacts on integrity and availability but not confidentiality.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, avoid exporting GIF images with very large dimensions in vulnerable versions of GIMP to mitigate risk.