CVE-2026-42170: Gimp: gimp dds plug-in heap-based buffer overflow via bpp mismatch in load_layer() (ddsread.c)
A heap-based buffer overflow vulnerability exists in the GIMP DDS (DirectDraw Surface) file parser. When a crafted DDS file declares a D3D9 pixel format but sets a lower bits-per-pixel (bpp) value in the header, the loader allocates an undersized heap buffer. Subsequent pixel data consumption at the real format's stride causes a write past the heap buffer boundary, leading to heap metadata corruption and potential code execution.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-42170?
CVE-2026-42170 has a high severity score of 7.8.
How do I fix CVE-2026-42170?
To fix CVE-2026-42170, ensure you update GIMP to the latest version that addresses this vulnerability.
What is the impact of CVE-2026-42170?
CVE-2026-42170 can potentially lead to a heap-based buffer overflow, allowing for arbitrary code execution.
What is the affected software version for CVE-2026-42170?
CVE-2026-42170 affects the GIMP software when processing certain DDS files.
What causes CVE-2026-42170?
CVE-2026-42170 is caused by a mismatch in bits-per-pixel (bpp) values in the DDS file header resulting in an undersized heap buffer allocation.