CVE Watch8 oct 2026

CVE-2026-106067

A heap-based buffer overflow was found in GIMP’s Hot color filter plug-in. For very large images, a pixel buffer is allocated using overflow

CVSS

6.3

Medio

EPSS

0.1%

KEV

—

Exploit Today

0-100

Publicado: 7 oct 2026 · Última mod.: 8 oct 2026 · CWE-119

EPSS · 30d

0.1%EPSS · 30 días0.1%

2026-10-082026-10-23

Descripción técnica

A heap-based buffer overflow was found in GIMP’s Hot color filter plug-in. For very large images, a pixel buffer is allocated using overflowing 32-bit width * height (and related) arithmetic while the filter’s pixel access path uses the true image size, after integer overflow in the allocation size

Referencias oficiales

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-957213.3 BAJ

0.2%

——0No description provided3h CVE-2026-957204.4 MED

1.1%

——0No description provided3h CVE-2026-957146.8 MED

7.6%

——2No description provided3h CVE-2026-957137.0 ALT

6.5%

——2No description provided3h CVE-2026-957107.1 ALT

7.7%

——2No description provided2h CVE-2026-957077.2 ALT

29.4%

——9No description provided2h