An out-of-bounds heap read flaw was found in GIMP's TIM image loader. (CVE-2026-96545)

CVE-2026-96545 describes an out-of-bounds heap read flaw in the TIM image loader component of GIMP. When a crafted 4bpp TIM image is opened that promotes the image to an RGBA layer, the file-tim plug-in allocates a row buffer that is too small but processes it using the larger RGBA row size. This mismatch causes adjacent heap contents to be copied into the decoded image buffer, potentially leading to a crash of the plug-in. The vulnerability is present in multiple specific GIMP versions, primarily in the 2.8.x, 2.10.x, 3.0.x, and 3.2.x series as enumerated. The CVSS v3.1 base score is 4.4, reflecting a medium impact with local attack vector, low complexity, no privileges required, user interaction needed, and limited confidentiality and availability impact.

The vulnerability allows an attacker to cause an out-of-bounds read of heap memory when a crafted TIM image is opened in GIMP. This can result in disclosure of adjacent heap contents within the decoded image and may cause the file-tim plug-in to crash, leading to a denial of service. There is no indication of code execution or integrity impact. The attack requires local access and user interaction to open the malicious file.

No explicit patch or remediation details are provided in the input data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should avoid opening untrusted or suspicious 4bpp TIM images that could trigger this vulnerability.