CVE-2026-82330

Name of the Vulnerable Software and Affected Versions GIMP (affected versions not specified)

Description A flaw exists in the file-pvr plugin where the VQ (compressed) decoder fails to properly perform memory bounds checking when processing specially crafted PVR image files. This missing validation leads to a heap out-of-bounds read, which can cause the application to crash, resulting in a denial of service or limited disclosure of heap memory contents.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.