Search: CVE-2026-106063

A heap-based buffer overflow vulnerability exists in GIMP's DICOM export plug-in when exporting images with extremely large dimensions. The vulnerability arises due to integer overflow in buffer size calculation, leading to writing beyond the allocated buffer. This can cause application crashes or memory corruption. Exploitation requires the user to export an oversized image; simply opening a malicious file is insufficient. Mitigation involves avoiding export of untrusted or excessively large images and applying dimension limits in automated workflows.