Threats tagged 'ghsa-wp8m-4297-94hv'

A vulnerability in GIMP's GIMPressionist plugin allows out-of-bounds memory writes when processing specially crafted preset files. This flaw arises from improper validation of vector indices before writing into fixed-size arrays. Exploitation requires user interaction to load a malicious preset file and can lead to application crashes or potentially arbitrary code execution. The issue is tracked as CVE-2026-97185 with a high severity rating and CVSS score of 7.8. Red Hat has issued a security advisory providing patches for affected GIMP versions on Red Hat Enterprise Linux 9.