CVE-2026-79902

Name of the Vulnerable Software and Affected Versions GIMP (affected versions not specified)

Description A flaw in the Seattle FilmWorks plugin occurs when processing a specially crafted SFW image file. The plugin allocates a Variable-Length Array (VLA)—an array whose size is determined at runtime—on the stack without performing integer overflow checks. This results in an unbounded stack allocation, leading to an application crash and a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.