A heap-based buffer overflow was found in GIMP’s PCX export plug-in. (CVE-2026-106065)

The vulnerability in GIMP's PCX export plug-in is due to integer overflow in the calculation of buffer size for images with very large width and height. The buffer allocation uses 32-bit width * height arithmetic that overflows, resulting in a smaller buffer than required. Subsequent GEGL operations use the full image extent, leading to a heap-based buffer overflow. This flaw is tracked as CVE-2026-106065 and has a CVSS 3.1 score of 6.3 with attack vector local, high attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, high integrity impact, and high availability impact.

Exploitation of this vulnerability can lead to integrity and availability impacts due to heap-based buffer overflow. However, the attack requires local access with high complexity and user interaction, limiting its exploitability. There is no confidentiality impact reported.

No patch or official fix information is currently available. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, avoid exporting extremely large images using the PCX export plug-in or limit image dimensions to prevent triggering the integer overflow.