REDHAT-BUG-2546668: Medium severity GIMP GIMP vulnerability

Published Oct 6, 2026

Updated

Finding 3. plug-ins/common/file-dicom.c, exportimage() (~1649–1652). Wrapped width height bpp allocation; GEGL write exceeds buffer. SIGSEGV/ASan WRITE. Vector: export to DICOM on very large image (multi‑GB scale), not a small malicious download alone. CVSS tentative: AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H (6.3).

Affected Software

1 affected component

GIMP GIMP

Event History

Oct 6, 2026

Data Sourced

via Red Hat·04:35 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

Who is realistically exposed to this issue?

Users who export very large, multi-gigabyte images to DICOM are the relevant exposure group. The issue is local and requires user interaction.

Is a small malicious downloaded file enough to trigger the problem?

No. The reported trigger is exporting a very large image to DICOM; a small malicious download alone is not described as sufficient.

What is the observed impact when the issue is triggered?

The wrapped allocation can cause a GEGL write beyond the allocated buffer. The report observed a SIGSEGV and an AddressSanitizer-detected write, with integrity and availability impact indicated.

REDHAT-BUG-2546668: Medium severity GIMP GIMP vulnerability

Affected Software

Event History

Frequently Asked Questions

Who is realistically exposed to this issue?

Is a small malicious downloaded file enough to trigger the problem?

What is the observed impact when the issue is triggered?

Company

Resources

Contact

Frequently Asked Questions

Who is realistically exposed to this issue?

Is a small malicious downloaded file enough to trigger the problem?

What is the observed impact when the issue is triggered?