BaselineWatch
Desk

CVE-2026-106065

6.3 medium SSVC exploitation: none Awaiting Analysis

A heap-based buffer overflow was found in GIMP’s PCX export plug-in. For images with extremely large width and height, buffer allocation uses overflowing 32-bit width * height arithmetic while subsequent GEGL operations use the full extent, after integer overflow in size calculation

Fix

Nothing published yet: no patch, vendor advisory or mitigation reference on NVD, no vendor advisory in the News for this CVE, not in CISA's KEV, no fixed package version. BaselineWatch does not guess at one.

Change history 1

  1. First seenCVSS 6.3NVD modified 2026-10-08 20:49

Affected (CPE criteria) 0

NVD has not attached CPE configurations yet.

References 2