5.5 Medium

CVE-2026-79902 Gimp: stack vla size underflow denial of service in seattle

Description

A flaw was found in the Seattle FilmWorks plugin in GIMP. When processing a specially crafted SFW image file, the plugin allocates a Variable-Length Array (VLA) on the stack without integer overflow checks, causing an unbounded stack allocation. This issue leads to an application crash, resulting in a denial of service.

CVSS 3.1 detail

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Exploitable with local access to the machine, without an account and if a user takes an action; an attacker can seriously compromise confidentiality, integrity or availability.

Attack vector: Local
Attack complexity: Low
Privileges required: None
Interaction: Required
Scope: Unchanged
Confidentiality: None
Integrity: None
Availability: High

Affected products and versions

Product	Affected versions	Fixed in
GIMP 3.1	3.1.4 → latest	No fix stated
Red Hat Enterprise Linux 6	Versions not published
Red Hat Enterprise Linux 7	Versions not published
Red Hat Enterprise Linux 8	Versions not published
Red Hat Enterprise Linux 9	Versions not published

References

access.redhat.com access.redhat.com
RHBZ#2523512 bugzilla.redhat.com
gitlab.gnome.org gitlab.gnome.org

Timeline

Published August 26, 2026
Last modified November 6, 2026

The 12 CVEs of GIMP →

CVE-2026-92248 Gimp: integer overflow when generating a thumbnail preview for a psd file 7.8 High CVE-2026-82343 Gimp: heap out-of-bounds read and stack out-of-bounds access in psd loader from channel-count handling 6.1 Medium CVE-2026-82330 Gimp: heap out-of-bounds read in pvr vq (compressed) decoder due to missing bounds check 6.1 Medium CVE-2026-82328 Gimp: heap out-of-bounds read in ico loader via unvalidated used_clrs palette count 6.1 Medium

Track this CVE