CVE-2026-59088: Gimp: gimp: denial of service via signed integer overflow in fli file processing
A flaw was found in GIMP. A signed integer overflow vulnerability exists in the file-fli plugin when processing FLI image files. This occurs due to an incorrect calculation during memory allocation for image buffers, where the multiplication of image width and height can exceed the maximum integer value. A remote attacker could exploit this by tricking a user into opening a specially crafted FLI file, leading to the application crashing and resulting in a denial of service.
Other sources
https://gitlab.gnome.org/GNOME/gimp/-/workitems/16492
fliheader.width and fliheader.height are gushort (uint16). The expression fb = gmalloc (fliheader.width fliheader.height); ofb = gmalloc (fliheader.width fliheader.height);
performs the multiplication after C integer promotion to int. When both values are 65535 the product 4,294,836,225 exceeds INTMAX (2,147,483,647) → undefined behavior. UBSan detects this and the plug-in aborts. Affected code / plug-ins/file-fli/fli-gimp.c:541-546 / image = gimpimagenew (fliheader.width, fliheader.height, GIMPINDEXED);
fb = gmalloc (fliheader.width fliheader.height); ofb = gmalloc (fliheader.width fliheader.height);
File: plug-ins/file-fli/fli-gimp.c:545 (and the mirror at L546, L805, L806) Version: GIMP 3.2.4
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-59088?
The severity of CVE-2026-59088 is classified as medium with a score of 5.5.
How do I fix CVE-2026-59088?
To fix CVE-2026-59088, update GIMP to the latest version that addresses the signed integer overflow vulnerability.
What type of vulnerability is CVE-2026-59088?
CVE-2026-59088 is an integer overflow vulnerability found in the file-fli plugin of GIMP.
What does CVE-2026-59088 affect?
CVE-2026-59088 affects the processing of FLI image files within GIMP.
What is the impact of CVE-2026-59088?
The impact of CVE-2026-59088 is a denial of service condition triggered by the processing of specially crafted FLI image files.