CVE-2026-66757

Name of the Vulnerable Software and Affected Versions GIMP (affected versions not specified)

Description A flaw exists in the file-sgi plugin when processing RLE-compressed SGI images. The plugin reads image header dimensions ysize and zsize as 16-bit unsigned integers. If a crafted file sets both dimensions to 65535, the multiplication of ysize * zsize overflows the standard 32-bit integer boundary before being passed to the calloc() function. This integer overflow leads to undefined behavior, causing the plugin to abort and resulting in a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.