CVE Watch8 oct 2026

CVE-2026-106066

A heap-based buffer overflow was found in GIMP’s raw data export plug-in. When exporting very large images, g_malloc() sizing based on overf

CVSS

6.3

Medio

EPSS

0.1%

KEV

—

Exploit Today

0-100

Publicado: 7 oct 2026 · Última mod.: 8 oct 2026 · CWE-119

EPSS · 30d

0.1%EPSS · 30 días0.1%

2026-10-082026-10-23

Descripción técnica

A heap-based buffer overflow was found in GIMP’s raw data export plug-in. When exporting very large images, g_malloc() sizing based on overflowing width * height * bytes-per-pixel can allocate far less memory than GEGL reads or writes during export, following integer overflow

Referencias oficiales

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-957213.3 BAJ

0.2%

——0No description provided3h CVE-2026-957204.4 MED

1.1%

——0No description provided3h CVE-2026-957146.8 MED

7.6%

——2No description provided3h CVE-2026-957137.0 ALT

6.5%

——2No description provided3h CVE-2026-957107.1 ALT

7.7%

——2No description provided2h CVE-2026-957077.2 ALT

29.4%

——9No description provided2h