CVE-2026-79902: Integer Overflow or Wraparound in GNOME GIMP
Description
CVE-2026-79902 is an integer overflow vulnerability in the Seattle FilmWorks plugin of GIMP version 3.1.4. The flaw occurs when processing a specially crafted SFW image file, causing an unbounded stack allocation due to lack of integer overflow checks on a variable-length array. This leads to an application crash and denial of service. Exploitation requires local user interaction to open a malicious file, limiting the attack vector. The vulnerability has a medium severity rating with a CVSS score of 5.5.
CVSS v3.1
Score 5.5medium
Affected software
GNOME
GIMP
Red Hat
Red Hat Enterprise Linux 6
Red Hat
Red Hat Enterprise Linux 7
Red Hat
Red Hat Enterprise Linux 8
Red Hat
Red Hat Enterprise Linux 9
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability in GIMP's Seattle FilmWorks plugin arises from improper handling of integer overflow when allocating a variable-length array on the stack. Processing a crafted SFW image triggers an unbounded stack allocation, causing the application to crash and resulting in denial of service. The attack requires a user to open a malicious SFW file, making exploitation less likely. No official patch or fix is currently confirmed. The Red Hat advisory recommends avoiding opening SFW files from untrusted sources as mitigation.
Potential Impact
Successful exploitation causes a denial of service by crashing the GIMP application. There is no impact on confidentiality or integrity. The attack vector is local with user interaction required, reducing the likelihood of exploitation. No known exploits are reported in the wild.
Mitigation Recommendations
No official fix or patch is currently confirmed. The vendor advisory recommends not opening SFW files from untrusted sources to mitigate the risk. Users should exercise caution when handling such files until a fix is available. Monitor the vendor advisory for updates regarding patches.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- redhat
- Date Reserved
- 2026-08-25T14:50:35.232Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Vendor Advisory Urls
- [{"url":"https://access.redhat.com/security/cve/CVE-2026-79902","vendor":"Red Hat"}]
Threat ID: 6a8eefb7acd9273b49f58b6e
Added to database: 08/26/2026, 13:52:55 UTC
Last enriched: 09/10/2026, 11:38:16 UTC
Last updated: 10/10/2026, 18:48:22 UTC
Views: 59
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.