{"id":"CVE-2026-40915","title":"Gimp: gimp: heap buffer overflow due to integer overflow in fits image loader","summary":"A flaw was found in GIMP. A remote attacker could exploit an integer overflow vulnerability in the FITS image loader by providing a specially crafted FITS file. This integer overflow leads to a zero-byte memory allocation, which is then …","severity":"medium","cvss":5.5,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvssSource":"cna","cwe":["CWE-190"],"vendor":"Red Hat","product":"gimp","affected":["gimp (all versions)","gimp (all versions)","gimp:2.8/gimp (all versions)","gimp (all versions)"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-04-15T19:32:48.306652Z"},"published":"2026-04-15","updated":"2026-11-05","sourceUpdated":"2026-11-05T21:24:54.827Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-40915","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-40915"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2458744","label":"RHBZ#2458744"}],"tags":["cve.org"],"epss":0.00375,"epssPercentile":0.31646,"ingestedAt":"2026-11-05T22:38:32.091Z","slug":"CVE-2026-40915","body":"## Overview\n\nA flaw was found in GIMP. A remote attacker could exploit an integer overflow vulnerability in the FITS image loader by providing a specially crafted FITS file. This integer overflow leads to a zero-byte memory allocation, which is then subjected to a heap buffer overflow when processing pixel data. Successful exploitation could result in a denial of service (DoS) or potentially arbitrary code execution.\n\n## Affected\n\n- `gimp (all versions)`\n- `gimp (all versions)`\n- `gimp:2.8/gimp (all versions)`\n- `gimp (all versions)`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n### Workarounds\n\nUsers should avoid opening untrusted FITS image files with GIMP. If GIMP is not required, consider removing the `gimp` package to eliminate the attack surface. This can be done using the system's package manager, for example: `sudo dnf remove gimp`. Removing GIMP may impact other applications that depend on it.","depth":"sunlit","depthScore":30,"depthScoreParts":{"impact":30.3,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}