Skip to content
OpenAdvisories
Medium · 5.5 CVE-2026-40915 EUVD-2026-23020GHSA-4f9g-vrx9-f8cq

Gimp: gimp: heap buffer overflow due to integer overflow in fits image loader

Published Apr 15, 2026 · Updated Nov 5, 2026 · Assigned by redhat

Description

A flaw was found in GIMP. A remote attacker could exploit an integer overflow vulnerability in the FITS image loader by providing a specially crafted FITS file. This integer overflow leads to a zero-byte memory allocation, which is then subjected to a heap buffer overflow when processing pixel data. Successful exploitation could result in a denial of service (DoS) or potentially arbitrary code execution.

Affected products

VendorProductAffectedFixed
Red Hat Red Hat Enterprise Linux 6 — —
Red Hat Red Hat Enterprise Linux 7 — —
Red Hat Red Hat Enterprise Linux 8 — —
Red Hat Red Hat Enterprise Linux 9 — —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 gimp 3.2.2-1 —
Debian 13 gimp 3.0.4-3+deb13u9 —
Debian 12 gimp No fix yet —
ReleasePackageFixed inAdvisory
Ubuntu 25.10 gimp No fix yet —
Show 5 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 24.04 LTS gimp No fix yet —
Ubuntu Pro 22.04 LTS gimp No fix yet —
Ubuntu Pro 20.04 LTS gimp No fix yet —
Ubuntu Pro 18.04 LTS gimp No fix yet —
Ubuntu Pro 16.04 LTS gimp No fix yet —

Advisories 1

References