Loading market data...
← Back to CVE feed

CVE-2026-97185

HIGH CVSS 7.8 View on NVD ↗

Description

A flaw was found in GIMP. When processing a specially crafted GIMPressionist preset file, the plug-in does not properly validate vector indices before writing into fixed-size arrays. This can lead to an out-of-bounds write, corrupting memory. An attacker could exploit this by convincing a user to load a malicious preset file, potentially causing a crash or enabling arbitrary code execution.

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Published: Sep 24, 2026 09:17 UTC Modified: Sep 24, 2026 21:00 UTC