SUSE-SU-2026:4895-1 Security update for gimp

This update for gimp fixes the following issues: - CVE-2026-82328: undersized palette memory allocations in the ICO loader can cause heap out-of-bounds reads bsc1277618. - CVE-2026-82343: improper channel-count handling in the PSD loader can cause heap and stack out-of-bounds reads bsc1277622. -...

CVE-2026-112257 Gimp: gimp: heap out-of-bounds read/write in psd thumbnail loader (load_resource_1033)

A flaw was found in GIMP. The PSD thumbnail resource loader performs a BGR-to-RGB channel swap with a fixed 3-byte stride and does not verify that the JPEG thumbnail is RGB. A crafted grayscale PSD thumbnail can cause a heap out-of-bounds read and write in the plug-in process, leading to a crash...

CVE-2026-112257 Gimp: gimp: heap out-of-bounds read/write in psd thumbnail loader (load_resource_1033)

A flaw was found in GIMP. The PSD thumbnail resource loader performs a BGR-to-RGB channel swap with a fixed 3-byte stride and does not verify that the JPEG thumbnail is RGB. A crafted grayscale PSD thumbnail can cause a heap out-of-bounds read and write in the plug-in process, leading to a crash...

CVE-2026-112257

A heap out-of-bounds read and write vulnerability exists in GIMP within the PSD thumbnail resource loader (specifically load_resource_1033). The flaw occurs because the loader performs a BGR-to-RGB channel swap using a fixed 3-byte stride without verifying that the JPEG thumbnail is actually in R...

Red Hat: CVE-2026-112257: gimp: gimp: heap out-of-bounds read/write in PSD thumbnail loader (load_resource_1033)

A flaw was found in GIMP. The PSD thumbnail resource loader performs a BGR-to-RGB channel swap with a fixed 3-byte stride and does not verify that the JPEG thumbnail is RGB. A crafted grayscale PSD thumbnail can cause a heap out-of-bounds read and write in the plug-in process, leading to a crash...

GIMP buffer error vulnerability

GIMP has a buffer error vulnerability. This vulnerability stems from the PSD thumbnail loader using a fixed 3-byte step for BGR-to-RGB channel swapping, without verifying whether the JPEG thumbnail is in RGB format. Specialized grayscale PSD thumbnails can lead to out-of-bound read and write...

UBUNTU-CVE-2026-106061

A flaw was found in GIMP’s X cursor XMC thumbnail loader. When GIMP generates a thumbnail for a crafted XMC file, it allocates a pixel buffer using a width height size computed in 32-bit signed arithmetic. If that product overflows, the allocation is smaller than the true image extent. A subseque...

CVE-2026-106061 Gimp: gimp: heap buffer over-read in x cursor (xmc) thumbnail loader on crafted file

A flaw was found in GIMP’s X cursor XMC thumbnail loader. When GIMP generates a thumbnail for a crafted XMC file, it allocates a pixel buffer using a width height size computed in 32-bit signed arithmetic. If that product overflows, the allocation is smaller than the true image extent. A subseque...

CVE-2026-106061 Gimp: gimp: heap buffer over-read in x cursor (xmc) thumbnail loader on crafted file

A flaw was found in GIMP’s X cursor XMC thumbnail loader. When GIMP generates a thumbnail for a crafted XMC file, it allocates a pixel buffer using a width height size computed in 32-bit signed arithmetic. If that product overflows, the allocation is smaller than the true image extent. A subseque...

CVE-2026-106061

A flaw was found in GIMP’s X cursor XMC thumbnail loader. When GIMP generates a thumbnail for a crafted XMC file, it allocates a pixel buffer using a width height size computed in 32-bit signed arithmetic. If that product overflows, the allocation is smaller than the true image extent. A subseque...

CVE-2026-106061

A flaw was found in GIMP’s X cursor XMC thumbnail loader. When GIMP generates a thumbnail for a crafted XMC file, it allocates a pixel buffer using a width height size computed in 32-bit signed arithmetic. If that product overflows, the allocation is smaller than the true image extent. A subseque...

LibRaw: LibRaw: Arbitrary code execution via specially crafted image file

A flaw was found in LibRaw, a library used for processing raw image files. This vulnerability, a heap-based buffer overflow, exists within the x3fthumbloader functionality. A remote attacker could exploit this by tricking a user into opening a specially crafted malicious file. Successful...

CVE-2026-20889

A heap-based buffer overflow vulnerability exists in the x3fthumbloader functionality of LibRaw Commit d20315b. A specially crafted malicious file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...

libraw:libraw_nef_fuzzer: Heap-buffer-overflow in LibRaw::kodak_rgb_load_raw

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=6646042577993728 Project: libraw Fuzzing Engine: afl Fuzz Target: librawneffuzzer Job Type: aflasanlibraw Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash Address: 0x63300001b780 Cras...