Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-106065

No fix known EPSS <1%CVSS 6.3

A heap-based buffer overflow was found in GIMP’s PCX export plug-in. For images with extremely large width and height, buffer allocation uses overflowing 32-bit width * height arithmetic while subsequent GEGL operations use the full extent, after integer overflow in size calculation

Published 2026-10-07 · CVE record · OSV

Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9

Distro releases

ReleasePackageFixed in
Debian 12gimpno fix
Debian 13gimpno fix
Debian 14gimpno fix
Ubuntu 26.04 LTSgimpno fix
Ubuntu 26.10gimpno fix
Ubuntu Pro 16.04 LTSgimpno fix
Ubuntu Pro 18.04 LTSgimpno fix
Ubuntu Pro 20.04 LTSgimpno fix
Ubuntu Pro 22.04 LTSgimpno fix
Ubuntu Pro 24.04 LTSgimpno fix