CVE-2026-40915 | BDVDB-2026-327321 Detail

Description#

A flaw was found in GIMP. A remote attacker could exploit an integer overflow vulnerability in the FITS image loader by providing a specially crafted FITS file. This integer overflow leads to a zero-byte memory allocation, which is then subjected to a heap buffer overflow when processing pixel data. Successful exploitation could result in a denial of service (DoS) or potentially arbitrary code execution.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-04-15Record published in the CVE List.
2. Version 22026-11-05Most recent update recorded in the CVE List.