Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-106064

No fix known EPSS <1%CVSS 6.3

A heap-based buffer overflow was found in GIMP’s GIF export plug-in. Exporting an image with very large width and height can cause 32-bit overflow when computing the pixel buffer size. The plug-in allocates a buffer based on the wrapped value while GEGL writes using the true image extent, rooted in integer overflow

Published 2026-10-07 · CVE record · OSV

Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9

Distro releases

ReleasePackageFixed in
Debian 12gimpno fix
Debian 13gimpno fix
Debian 14gimpno fix
Ubuntu 26.04 LTSgimpno fix
Ubuntu 26.10gimpno fix
Ubuntu Pro 16.04 LTSgimpno fix
Ubuntu Pro 18.04 LTSgimpno fix
Ubuntu Pro 20.04 LTSgimpno fix
Ubuntu Pro 22.04 LTSgimpno fix
Ubuntu Pro 24.04 LTSgimpno fix