Threat intelligence dashboard
CVE-2026-62439high

Gimp: gimp: file-pvr plug-in pvr file parsing integer overflow heap-based buffer overflow vulnerability

A flaw was found in GIMP. An integer overflow occurs in the file-pvr plug-in when calculating memory buffer sizes for image dimensions. By tricking a user into opening or previewing a specially crafted PowerVR (.pvr) file, an attacker can trigger a heap-based buffer overflow, potentially leading to arbitrary code execution or a Denial of Service (DoS) via an application crash.

Risk score

7.0

CVSS 3.1

Vendor
Red Hat
Product
Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9
CWE
CWE-190
Published
Oct 16, 2026
Updated
Oct 31, 2026
CISA KEV
Not flagged

Affected products and versions

Red Hat Enterprise Linux 10

Red Hat

No affected version range was provided.

Red Hat Enterprise Linux 6

Red Hat

No affected version range was provided.

Red Hat Enterprise Linux 7

Red Hat

No affected version range was provided.

Red Hat Enterprise Linux 8

Red Hat

No affected version range was provided.

Red Hat Enterprise Linux 9

Red Hat

No affected version range was provided.

Technical metrics

7.0

CVSS 3.1

Severity
high
Source
redhat
Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H