CVE-2026-62438Medium· 6.1▾ SunlitA flaw was found in GIMP. An attacker can cause a Denial of Service (DoS) or potentially disclose sensitive memory contents by convincing a user to open or preview a specially crafted Bohemia Interactive (PAA) texture file. Due to an int…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 33.6 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
A flaw was found in GIMP. An attacker can cause a Denial of Service (DoS) or potentially disclose sensitive memory contents by convincing a user to open or preview a specially crafted Bohemia Interactive (PAA) texture file. Due to an integer overflow when calculating image dimensions during file decompression, the application allocates an undersized memory buffer. Subsequent processing reads memory past the buffer boundary, terminating the plug-in process unexpectedly.
gimp (all versions)gimpgimp (all versions)gimp:2.8/gimp (all versions)gimp (all versions)Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2025-6035Medium· 6.1A flaw was found in GIMP
CVE-2026-62439High· 7.0Gimp: gimp: file-pvr plug-in pvr file parsing integer overflow heap-based buffer overflow vulnerability
CVE-2026-66758High· 7.8A flaw was found in the file-fits plugin in GIMP
CVE-2026-92248High· 7.8A flaw was found in the file-psd plugin in GIMP
CVE-2026-58384High· 7.3A flaw was found in GIMP's PSD parser
CVE-2026-78465High· 7.0A flaw was found in the file-pcx plugin in GIMP, affecting 32-bit builds only