REDHAT-BUG-2507465: Integer Overflow

Published Jul 27, 2026

Updated

A flaw was found in the file-sgi plugin in GIMP, affecting all versions. When processing an RLE-compressed SGI image, the plugin allocates memory for a row table. The image header dimensions (ysize and zsize) are read as 16-bit unsigned integers. If a crafted file sets both dimensions to their maximum value (65535), the multiplication ysize zsize overflows the standard 32-bit int boundary before being passed to calloc. This integer overflow issue results in undefined behavior, aborting the plugin and causing a denial of service.

Affected Software

1 affected component

GIMP file-sgi plugin=

Event History

Jul 27, 2026

Data Sourced

via Red Hat·01:34 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-2507465?

The severity of REDHAT-BUG-2507465 is medium with a score of 4.

How do I fix REDHAT-BUG-2507465?

To fix REDHAT-BUG-2507465, you should update the GIMP file-sgi plugin to the latest version that addresses this vulnerability.

What type of vulnerability is REDHAT-BUG-2507465?

REDHAT-BUG-2507465 is classified as an Integer Overflow vulnerability.

Which software is affected by REDHAT-BUG-2507465?

The affected software for REDHAT-BUG-2507465 is the GIMP file-sgi plugin.

When was REDHAT-BUG-2507465 published?

REDHAT-BUG-2507465 was published on July 27, 2026.