Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2026-4887

Gimp: gimp:memory disclosure and denial of service via specially crafted pcx image

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
redhat

Description

A flaw was found in GIMP. This issue is a heap buffer over-read in GIMP PCX file loader due to an off-by-one error. A remote attacker could exploit this by convincing a user to open a specially crafted PCX image. Successful exploitation could lead to out-of-bounds memory disclosure and a possible application crash, resulting in a Denial of Service (DoS).

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support

Default version status: affected

  • 2:2.8.22-1.el7_9.6 to < *unaffected

Red Hat Red Hat Enterprise Linux 8

Default version status: affected

  • 8100020260512115927.4c9c024f to < *unaffected

Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support

Default version status: affected

  • 8040020260520140422.70584597 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On

Default version status: affected

  • 8040020260520140422.70584597 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support

Default version status: affected

  • 8060020260520140100.6af1eaf0 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.6 Telecommunications Update Service

Default version status: affected

  • 8060020260520140100.6af1eaf0 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions

Default version status: affected

  • 8060020260520140100.6af1eaf0 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.8 Telecommunications Update Service

Default version status: affected

  • 8080020260520102644.0621e4ee to < *unaffected

Red Hat Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions

Default version status: affected

  • 8080020260520102644.0621e4ee to < *unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

  • 2:3.0.4-1.el9_7.5 to < *unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

  • 2:3.0.4-4.el9_8.4 to < *unaffected

Red Hat Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions

Default version status: affected

  • 2:2.99.8-3.el9_0.6 to < *unaffected

Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions

Default version status: affected

  • 2:2.99.8-4.el9_2.6 to < *unaffected

Red Hat Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions

Default version status: affected

  • 2:2.99.8-4.el9_4.6 to < *unaffected

Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support

Default version status: affected

  • 2:2.99.8-4.el9_6.7 to < *unaffected

Red Hat Red Hat Enterprise Linux 6

Default version status: unknown

References