CVE-2026-66758

Name of the Vulnerable Software and Affected Versions GIMP (affected versions not specified)

Description A flaw in the file-fits plugin occurs when processing FITS image files. The plugin uses signed 32-bit integers to calculate memory allocation sizes for width and height. If a crafted file contains large values for these dimensions, the resulting product exceeds 2^31, causing an integer overflow. This leads to an undersized heap-based buffer allocation. Subsequently, when cfitsio writes a full row of pixels into this buffer, a heap-based buffer overflow occurs, resulting in memory corruption that could allow arbitrary code execution or cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.