{"id":"CVE-2026-4887","title":"Gimp: gimp:memory disclosure and denial of service via specially crafted pcx image","summary":"A flaw was found in GIMP. This issue is a heap buffer over-read in GIMP PCX file loader due to an off-by-one error. A remote attacker could exploit this by convincing a user to open a specially crafted PCX image. Successful exploitation …","severity":"medium","cvss":6.1,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","cvssSource":"cna","cwe":["CWE-193"],"vendor":"Red Hat","product":"gimp","affected":["gimp (all versions)","gimp:2.8 (all versions)","gimp:2.8 (all versions)","gimp:2.8 (all versions)","gimp:2.8 (all versions)","gimp:2.8 (all versions)","gimp:2.8 (all versions)","gimp:2.8 (all versions)","gimp:2.8 (all versions)","gimp (all versions)","gimp (all versions)","gimp (all versions)","gimp (all versions)","gimp (all versions)","gimp (all versions)","gimp"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-03-26T12:58:38.570446Z"},"published":"2026-03-26","updated":"2026-11-05","sourceUpdated":"2026-11-05T21:17:31.449Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-4887","references":[{"url":"https://access.redhat.com/errata/RHSA-2026:16484","label":"RHSA-2026:16484"},{"url":"https://access.redhat.com/errata/RHSA-2026:17533","label":"RHSA-2026:17533"},{"url":"https://access.redhat.com/errata/RHSA-2026:19362","label":"RHSA-2026:19362"},{"url":"https://access.redhat.com/errata/RHSA-2026:20552","label":"RHSA-2026:20552"},{"url":"https://access.redhat.com/errata/RHSA-2026:20553","label":"RHSA-2026:20553"},{"url":"https://access.redhat.com/errata/RHSA-2026:20554","label":"RHSA-2026:20554"},{"url":"https://access.redhat.com/errata/RHSA-2026:20691","label":"RHSA-2026:20691"},{"url":"https://access.redhat.com/errata/RHSA-2026:25899","label":"RHSA-2026:25899"},{"url":"https://access.redhat.com/errata/RHSA-2026:25901","label":"RHSA-2026:25901"},{"url":"https://access.redhat.com/errata/RHSA-2026:25907","label":"RHSA-2026:25907"},{"url":"https://access.redhat.com/errata/RHSA-2026:26168","label":"RHSA-2026:26168"},{"url":"https://access.redhat.com/security/cve/CVE-2026-4887"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2451669","label":"RHBZ#2451669"},{"url":"https://gitlab.gnome.org/GNOME/gimp/-/issues/15960"}],"tags":["cve.org"],"epss":0.00645,"epssPercentile":0.51178,"ingestedAt":"2026-11-05T22:38:32.040Z","slug":"CVE-2026-4887","body":"## Overview\n\nA flaw was found in GIMP. This issue is a heap buffer over-read in GIMP PCX file loader due to an off-by-one error. A remote attacker could exploit this by convincing a user to open a specially crafted PCX image. Successful exploitation could lead to out-of-bounds memory disclosure and a possible application crash, resulting in a Denial of Service (DoS).\n\n## Affected\n\n- `gimp (all versions)`\n- `gimp:2.8 (all versions)`\n- `gimp:2.8 (all versions)`\n- `gimp:2.8 (all versions)`\n- `gimp:2.8 (all versions)`\n- `gimp:2.8 (all versions)`\n- `gimp:2.8 (all versions)`\n- `gimp:2.8 (all versions)`\n- `gimp:2.8 (all versions)`\n- `gimp (all versions)`\n- `gimp (all versions)`\n- `gimp (all versions)`\n- `gimp (all versions)`\n- `gimp (all versions)`\n- `gimp (all versions)`\n- `gimp`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n### Workarounds\n\nUsers should avoid opening untrusted PCX image files with GIMP. If GIMP is not required, consider removing the `gimp` package to eliminate this attack vector.","depth":"sunlit","depthScore":34,"depthScoreParts":{"impact":33.6,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}