REDHAT-BUG-2555595: Medium severity GIMP SwatchBooker vulnerability
Published Oct 19, 2026
·Updated
A flaw was found in GIMP’s SwatchBooker (SBZ) palette importer. The parser can leave the color model NULL, then still process <values> text and call strcmp(NULL, "srgb") in swatchbookerloadtext(), crashing the main GIMP process (palette import is not plug-in-isolated).
Affected Software
1 affected component
GIMP SwatchBooker
Event History
Oct 19, 2026
Data Sourced
via Red Hat·02:06 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What interaction is required to trigger the flaw?
GIMP must import an SBZ palette whose parsed color model is left unset while the file still includes <values> text. Processing that text can then invoke strcmp with a NULL color model.
2
Is the impact limited to a separate importer or plug-in process?
No. The palette importer is not plug-in-isolated, so triggering the flaw crashes the main GIMP process.