CVE-2026-96543

{}

{}

{}

{"acknowledgement": "Upstream acknowledges Spektra as the original reporter.", "bugzilla": {"description": "gimp: gimp: out-of-bounds heap write when loading non-square PVR images", "id": "2539392", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2539392"}, "csaw": false, "cvss3": {"cvss3_base_score": "7.8", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "status": "draft"}, "cwe": "CWE-787", "details": ["An out-of-bounds heap write flaw was found in GIMP's PVR image loader. When loading a crafted non-square PVR texture, pvr_decode_twiddle() can write attacker-controlled pixel data beyond the end of a correctly allocated heap buffer because the destination offset is not bounds-checked. A local attacker can exploit this by convincing a user to open a malicious PVR image, potentially causing arbitrary code execution in the file-pvr plug-in process."], "mitigation": {"lang": "en:us", "value": "Do not open PVR image files from untrusted sources. No application-level mitigation that preserves processing of untrusted PVR files is known."}, "name": "CVE-2026-96543", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "gimp", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "gimp", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "gimp", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "gimp:2.8/gimp", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "gimp", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-09-19T16:48:48Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-96543\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-96543\nhttps://gitlab.gnome.org/GNOME/gimp/-/work_items/16789"], "threat_severity": "Important"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": null}], "enrichment": {"confidence": 75.0, "confidence_source": "inferred", "scores": [{"score": 75.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "product": "gimp", "vendor": "gnome"}], "created": "2026-09-24T02:00:13.559909+00:00", "updated": "2026-09-24T02:30:13.845414+00:00", "vendors": ["gnome", "gnome$PRODUCT$gimp"]}