REDHAT-BUG-2547456: Medium severity GIMP GIMP vulnerability
Published Oct 7, 2026
·Updated
Finding 5. plug-ins/common/file-pcx.c, exportimage() (~1192–1195). SIGSEGV/heap WRITE on export. CVSS tentative: 6.3 (AC:H).
Affected Software
1 affected component
GIMP GIMP
Event History
Oct 7, 2026
Data Sourced
via Red Hat·02:16 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the likely impact if this issue is triggered?
The reported behavior includes a segmentation fault and a heap write during export, which can cause GIMP to crash. The tentative CVSS score is 6.3 with high attack complexity.
2
How would an attacker need to interact with GIMP to trigger the issue?
The issue is reported in the PCX export path, so exploitation would require reaching the affected export operation. The available data does not identify affected versions, default exposure, or a workaround.