CVE-2026-78465

Name of the Vulnerable Software and Affected Versions GIMP (affected versions not specified)

Description A flaw exists in the file-pcx plugin affecting 32-bit builds. When processing a PCX image file, the plugin calculates memory allocation sizes using image dimensions and the number of color planes. If a crafted file specifies 4 planes and large dimensions, an integer overflow occurs because the calculation exceeds the 32-bit integer limit. This leads to an undersized heap-based buffer allocation, which subsequently causes a heap-based buffer overflow when image data is written into the buffer. This memory corruption can result in arbitrary code execution or a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.