A heap-based buffer overflow was found in GIMP’s Hot color filter plug-in. (CVE-2026-106067)

CVE-2026-106067 describes a heap-based buffer overflow in the Hot color filter plug-in of GIMP. The vulnerability arises from overflowing 32-bit arithmetic used to allocate a pixel buffer for very large images (width * height and related calculations). This results in a buffer smaller than required, while the filter's pixel access uses the actual image dimensions, leading to out-of-bounds writes or reads on the heap.

The vulnerability can lead to memory corruption on the heap, potentially allowing an attacker to cause a denial of service or execute arbitrary code with the privileges of the user running GIMP. The CVSS score of 6.3 (medium severity) reflects the requirement for local access, high attack complexity, no privileges required, and user interaction needed. Confidentiality is not impacted, but integrity and availability are.

No patch or official fix information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, avoid processing very large images with the Hot color filter plug-in or disable the plug-in if possible.