Threats Tagged 'cve-2026-59088'

A heap buffer overflow vulnerability exists in the Seattle Filmworks file loader of the GIMP image manipulation program version 3.2.4-4.1. This flaw can be triggered when a user opens a specially crafted Seattle Filmworks (.sfw) file, potentially leading to memory corruption. The vulnerability could allow an attacker to execute arbitrary code or cause a denial of service within the context of the GIMP application. Exploitation requires user interaction by opening a malicious file. Users are advised to avoid opening .sfw files from untrusted sources to mitigate the risk.

CVE-2026-59088 is a signed integer overflow vulnerability in the GIMP file-fli plugin that occurs when processing FLI image files. The flaw arises from incorrect calculation during memory allocation for image buffers, where multiplying image width and height can exceed the maximum integer value. Exploitation requires a user to open a specially crafted FLI file, which can cause the application to crash, resulting in a denial of service. The vulnerability has a medium severity rating and a CVSS score of 5.5. No official patch is currently available. Users are advised to avoid opening FLI files from untrusted sources to mitigate risk.

A flaw was found in GIMP. A signed integer overflow vulnerability exists in the `file-fli` plugin when processing FLI image files. This occurs due to an incorrect calculation during memory allocation for image buffers, where the multiplication of image width and height can exceed the maximum integer value. A remote attacker could exploit this by tricking a user into opening a specially crafted FLI file, leading to the application crashing and resulting in a denial of service.