CVE-2026-82324

Name of the Vulnerable Software and Affected Versions GIMP (affected versions not specified)

Description A flaw exists in the file-iff (IFF/ILBM) plugin. When processing a specially crafted IFF/ILBM image file, the plugin fails to properly validate the HAM row size and incorrectly handles scenarios where the nPlanes variable is zero. This leads to a row size mismatch that bypasses memory bounds checking, resulting in heap out-of-bounds reads. This condition can cause the application to crash, leading to a denial of service or limited disclosure of heap memory contents.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.