CVE-2026-80101: Gimp: multiple heap out-of-bounds reads in xwd loader from unrelated width and bytes-per-line validation
A flaw was found in the file-xwd plugin in GIMP. When processing a specially crafted XWD image file, the plugin validates the image width and bytes-per-line parameters independently rather than ensuring their combined values are consistent with the allocated buffer size. This incorrect validation leads to improper bounds checking, causing a heap out-of-bounds read. This issue can result in an application crash, leading to a denial of service, or a limited information disclosure of heap memory contents into the produced image.
Affected Software
Event History
Frequently Asked Questions
What access and interaction are required for exploitation?
The CVSS vector indicates local attack access, no privileges required, and user interaction required. Exploitation involves getting a user to process a specially crafted XWD image with the affected loader.
Is a network-reachable attack path indicated?
No. The reported attack vector is local (AV:L); the available data does not indicate direct network exploitation.
Which GIMP component should be prioritized for review?
Prioritize installations that use the file-xwd plugin, also identified as the XWD loader. The provided information does not identify affected or fixed GIMP versions.