CVE-2026-62439High· 7.0▾ TwilightA flaw was found in GIMP. An integer overflow occurs in the file-pvr plug-in when calculating memory buffer sizes for image dimensions. By tricking a user into opening or previewing a specially crafted PowerVR (.pvr) file, an attacker ca…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 38.5 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
A flaw was found in GIMP. An integer overflow occurs in the file-pvr plug-in when calculating memory buffer sizes for image dimensions. By tricking a user into opening or previewing a specially crafted PowerVR (.pvr) file, an attacker can trigger a heap-based buffer overflow, potentially leading to arbitrary code execution or a Denial of Service (DoS) via an application crash.
gimp (all versions)gimpgimp (all versions)gimp:2.8/gimp (all versions)gimp (all versions)Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2025-6035Medium· 6.1A flaw was found in GIMP
CVE-2026-62438Medium· 6.1Gimp: gimp: paa integer overflow out-of-bounds read
CVE-2026-66758High· 7.8A flaw was found in the file-fits plugin in GIMP
CVE-2026-92248High· 7.8A flaw was found in the file-psd plugin in GIMP
CVE-2026-58384High· 7.3A flaw was found in GIMP's PSD parser
CVE-2026-78465High· 7.0A flaw was found in the file-pcx plugin in GIMP, affecting 32-bit builds only