Threats Tagged 'cve-2026-79902'

Multiple security vulnerabilities affecting GIMP, including remote code execution and arbitrary code execution via crafted image files, have been fixed in the gimp-3.2.6-1.1 package. These issues involve integer overflows, heap-based buffer overflows, and unsigned underflows in PSD, TIF, and SGI file parsing. The vulnerabilities were addressed in updates available for various architectures and distributions, including Red Hat Enterprise Linux 9. No known exploits in the wild have been reported.

These are all security issues fixed in the gimp-3.2.6-1.1 package on the GA media of openSUSE Tumbleweed.

CVE-2026-79902 is an integer overflow vulnerability in the Seattle FilmWorks plugin of GIMP version 3.1.4. The flaw occurs when processing a specially crafted SFW image file, causing an unbounded stack allocation due to lack of integer overflow checks on a variable-length array. This leads to an application crash and denial of service. Exploitation requires local user interaction to open a malicious file, limiting the attack vector. The vulnerability has a medium severity rating with a CVSS score of 5.5.