{"id":"CVE-2026-78465","title":"A flaw was found in the file-pcx plugin in GIMP, affecting 32-bit builds only","summary":"A flaw was found in the file-pcx plugin in GIMP, affecting 32-bit builds only. When processing a PCX image file, the plugin calculates memory allocation sizes based on the image dimensions and the number of color planes. If a crafted fil…","severity":"high","cvss":7,"cvssVector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-190"],"vendor":"gimp","product":"gimp","affected":["gimp >= 3.0.0, <= 3.2.4","gimp = 3.3.1"],"published":"2026-08-24","updated":"2026-10-14","sourceUpdated":"2026-10-14T13:10:00.187","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-78465","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-78465","label":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2522057","label":"secalert@redhat.com"},{"url":"https://gitlab.gnome.org/GNOME/gimp/-/work_items/16578","label":"secalert@redhat.com"},{"url":"https://gitlab.gnome.org/GNOME/gimp/-/work_items/16578","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"tags":["nvd"],"epss":0.00281,"epssPercentile":0.19015,"ingestedAt":"2026-10-14T13:30:58.563Z","slug":"CVE-2026-78465","body":"## Overview\n\nA flaw was found in the file-pcx plugin in GIMP, affecting 32-bit builds only. When processing a PCX image file, the plugin calculates memory allocation sizes based on the image dimensions and the number of color planes. If a crafted file sets the number of planes to 4 alongside sufficiently large dimensions, the calculation exceeds the 32-bit integer limit and overflows, resulting in an undersized heap-based buffer allocation. This integer overflow issue results in a heap-based buffer overflow when the plugin subsequently writes image data into the undersized buffer, causing memory corruption, potentially leading to arbitrary code execution or a denial of service.\n\n## Affected\n\n- `gimp >= 3.0.0, <= 3.2.4`\n- `gimp = 3.3.1`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":39,"depthScoreParts":{"impact":38.5,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}