CVE-2026-106062: Improper Restriction of Operations within the Bounds of a Memory Buffer in Red Hat Red Hat Enterprise Linux 10

This vulnerability involves improper restriction of operations within the bounds of a memory buffer in GIMP's DDS loader. Specifically, when loading a crafted DDS image, buffer sizes derived from width, height, and pitch are calculated using 32-bit arithmetic that can overflow. This causes the allocated buffer to be smaller than required for the pixel data written through GEGL, resulting in heap corruption and potentially arbitrary code execution. The vulnerability is tracked as CVE-2026-106062 and affects Red Hat Enterprise Linux 10.

Successful exploitation can lead to heap corruption and arbitrary code execution within the GIMP process. This can compromise the confidentiality, integrity, and availability of the affected system. The CVSS v3.1 score of 7.8 reflects high impact on confidentiality, integrity, and availability with low attack complexity and no privileges required but user interaction needed.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-106062 for current remediation guidance. Until a patch is available, avoid opening untrusted DDS images with GIMP to mitigate risk.