CVE-2026-106061

Name of the Vulnerable Software and Affected Versions GIMP (affected versions not specified)

Description A flaw exists in the X cursor (XMC) thumbnail loader. When generating a thumbnail for a specially crafted XMC file, the software calculates the pixel buffer size using 32-bit signed arithmetic for width * height. An integer overflow in this calculation can lead to a buffer allocation smaller than the actual image size. Consequently, a GEGL buffer read using the original dimensions results in an out-of-bounds read on the heap, which may cause the application to crash or lead to process memory corruption.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.