CVE-2026-59088

Name of the Vulnerable Software and Affected Versions GIMP (affected versions not specified)

Description A signed integer overflow occurs in the file-fli plugin when processing FLI image files. The issue stems from an incorrect calculation during memory allocation for image buffers, where multiplying the image width and height can exceed the maximum integer value. A remote attacker can trigger an application crash and a denial of service by tricking a user into opening a specially crafted FLI file.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.