REDHAT-BUG-2496582: Medium severity Gnome GIMP vulnerability
https://gitlab.gnome.org/GNOME/gimp/-/workitems/16492
fliheader.width and fliheader.height are gushort (uint16). The expression fb = gmalloc (fliheader.width fliheader.height); ofb = gmalloc (fliheader.width fliheader.height);
performs the multiplication after C integer promotion to int. When both values are 65535 the product 4,294,836,225 exceeds INTMAX (2,147,483,647) → undefined behavior. UBSan detects this and the plug-in aborts. Affected code / plug-ins/file-fli/fli-gimp.c:541-546 / image = gimpimagenew (fliheader.width, fliheader.height, GIMPINDEXED);
fb = gmalloc (fliheader.width fliheader.height); ofb = gmalloc (fliheader.width fliheader.height);
File: plug-ins/file-fli/fli-gimp.c:545 (and the mirror at L546, L805, L806) Version: GIMP 3.2.4
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2496582?
The severity of REDHAT-BUG-2496582 is medium, rated at 4.
What software is affected by REDHAT-BUG-2496582?
The affected software by REDHAT-BUG-2496582 is Gnome GIMP.
How do I fix REDHAT-BUG-2496582?
To fix REDHAT-BUG-2496582, you need to apply the relevant patches provided by Gnome GIMP.
What vulnerability does REDHAT-BUG-2496582 describe?
REDHAT-BUG-2496582 describes an issue with integer overflow due to incorrect handling of the width and height values.
When was REDHAT-BUG-2496582 published?
REDHAT-BUG-2496582 was published on July 2, 2026.