REDHAT-BUG-2547456: Medium severity GIMP GIMP vulnerability

Published Oct 7, 2026

Updated

Finding 5. plug-ins/common/file-pcx.c, exportimage() (~1192–1195). SIGSEGV/heap WRITE on export. CVSS tentative: 6.3 (AC:H).

Affected Software

1 affected component

GIMP GIMP

Event History

Oct 7, 2026

Data Sourced

via Red Hat·02:16 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the likely impact if this issue is triggered?

The reported behavior includes a segmentation fault and a heap write during export, which can cause GIMP to crash. The tentative CVSS score is 6.3 with high attack complexity.

How would an attacker need to interact with GIMP to trigger the issue?

The issue is reported in the PCX export path, so exploitation would require reaching the affected export operation. The available data does not identify affected versions, default exposure, or a workaround.

REDHAT-BUG-2547456: Medium severity GIMP GIMP vulnerability

Affected Software

Event History

Frequently Asked Questions

What is the likely impact if this issue is triggered?

How would an attacker need to interact with GIMP to trigger the issue?

Company

Resources

Contact

Frequently Asked Questions

What is the likely impact if this issue is triggered?

How would an attacker need to interact with GIMP to trigger the issue?