CVE-2026-117557

The SDL_image library, specifically versions through 3.4.8 and 2.8.12 , contains a stack out-of-bounds read vulnerability within the IMG_LoadLBM_IO() function in src/IMG_lbm.c. The root cause is the failure to validate the bitplane count when HAM mode is enabled. An attacker can provide a special...

CVE-2026-82324

CVE-2026-82324 affects the file-iff (IFF/ILBM) plugin in GIMP . When processing a specially crafted IFF/ILBM image file, the plugin fails to properly validate the HAM row size and mishandles cases where the number of color planes (nPlanes ) is zero. This causes a row size mismatch that bypasses m...