CVE-2026-59088

Katalog CVE

CVSS 5.5 · Medium EPSS 0,33%

Kerentanan Integer Overflow or Wraparound pada gimp, redhat enterprise linux. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

A flaw was found in GIMP. A signed integer overflow vulnerability exists in the `file-fli` plugin when processing FLI image files. This occurs due to an incorrect calculation during memory allocation for image buffers, where the multiplication of image width and height can exceed the maximum integer value. A remote attacker could exploit this by tricking a user into opening a specially crafted FLI file, leading to the application crashing and resulting in a denial of service.

Rincian

Terbit di NVD

10 Agustus 2026

Terakhir diubah

21 Agustus 2026

Status NVD

Analyzed

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-190: Integer Overflow or Wraparound

EPSS (30 hari)

0,33% peluang dieksploitasi; lebih tinggi dari 24,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://access.redhat.com/security/cve/CVE-2026-59088 advisory vendor
• https://bugzilla.redhat.com/show_bug.cgi?id=2496582 issue tracking · advisory vendor
• https://gitlab.gnome.org/GNOME/gimp/-/work_items/16492 exploit · mitigasi · advisory vendor