CVE-2026-96546

Name of the Vulnerable Software and Affected Versions GIMP (affected versions not specified)

Description A one-byte out-of-bounds heap read flaw exists in the uncompressed DDS image loader. When opening an uncompressed DDS image, the file-dds plug-in performs an unconditional one-byte look-ahead after processing the final pixel. This can lead to a crash if the byte immediately following the pixel buffer is inaccessible. No information disclosure or code execution has been demonstrated.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.