CVE-2026-82324: Out-of-bounds Read in GNOME GIMP

The vulnerability CVE-2026-82324 affects the IFF/ILBM image file plugin in GIMP 3.0.0. The plugin fails to properly validate the HAM row size and mishandles cases where the number of color planes (nPlanes) is zero. This leads to a mismatch in row size that bypasses memory bounds checking, resulting in heap out-of-bounds reads. The consequence is an application crash causing denial of service or limited disclosure of heap memory contents. Exploitation requires convincing a user to open a maliciously crafted IFF/ILBM image file. The vulnerability has a CVSS 3.1 score of 6.1 (medium severity) with local attack vector, low complexity, no privileges required, user interaction required, and impacts confidentiality (low) and availability (high). The Red Hat advisory does not confirm an official patch but advises avoiding opening untrusted IFF/ILBM files with GIMP.

Successful exploitation can cause GIMP to crash, leading to denial of service. There is also a potential for limited information disclosure of heap memory contents, which might include sensitive data. However, exploitation requires local user interaction by opening a crafted image file, reducing the likelihood of attack. No integrity impact is reported.

The vendor advisory from Red Hat states that to mitigate this vulnerability, users should avoid opening IFF/ILBM files from untrusted sources with GIMP. No official patch or fix is currently confirmed; therefore, users should follow this mitigation until a fix is released. Monitor the vendor advisory for updates on patch availability.