CVE Watch8 oct 2026

CVE-2026-106065

A heap-based buffer overflow was found in GIMP’s PCX export plug-in. For images with extremely large width and height, buffer allocation use

CVSS

6.3

Medio

EPSS

0.1%

KEV

—

Exploit Today

0-100

Publicado: 7 oct 2026 · Última mod.: 8 oct 2026 · CWE-119

EPSS · 30d

0.1%EPSS · 30 días0.1%

2026-10-082026-10-23

Descripción técnica

A heap-based buffer overflow was found in GIMP’s PCX export plug-in. For images with extremely large width and height, buffer allocation uses overflowing 32-bit width * height arithmetic while subsequent GEGL operations use the full extent, after integer overflow in size calculation

Referencias oficiales

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-957213.3 BAJ

0.2%

——0No description provided3h CVE-2026-957204.4 MED

1.1%

——0No description provided3h CVE-2026-957146.8 MED

7.6%

——2No description provided3h CVE-2026-957137.0 ALT

6.5%

——2No description provided3h CVE-2026-957107.1 ALT

7.7%

——2No description provided2h CVE-2026-957077.2 ALT

29.4%

——9No description provided2h