---
id: CVE-2026-4887
title: >-
  Gimp: gimp:memory disclosure and denial of service via specially crafted pcx
  image
summary: >-
  A flaw was found in GIMP. This issue is a heap buffer over-read in GIMP PCX
  file loader due to an off-by-one error. A remote attacker could exploit this
  by convincing a user to open a specially crafted PCX image. Successful
  exploitation …
severity: medium
cvss: 6.1
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H'
cvssSource: cna
cwe:
  - CWE-193
vendor: Red Hat
product: gimp
affected:
  - gimp (all versions)
  - 'gimp:2.8 (all versions)'
  - 'gimp:2.8 (all versions)'
  - 'gimp:2.8 (all versions)'
  - 'gimp:2.8 (all versions)'
  - 'gimp:2.8 (all versions)'
  - 'gimp:2.8 (all versions)'
  - 'gimp:2.8 (all versions)'
  - 'gimp:2.8 (all versions)'
  - gimp (all versions)
  - gimp (all versions)
  - gimp (all versions)
  - gimp (all versions)
  - gimp (all versions)
  - gimp (all versions)
  - gimp
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-03-26T12:58:38.570446Z'
published: '2026-03-26'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T21:17:31.449Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-4887'
references:
  - url: 'https://access.redhat.com/errata/RHSA-2026:16484'
    label: 'RHSA-2026:16484'
  - url: 'https://access.redhat.com/errata/RHSA-2026:17533'
    label: 'RHSA-2026:17533'
  - url: 'https://access.redhat.com/errata/RHSA-2026:19362'
    label: 'RHSA-2026:19362'
  - url: 'https://access.redhat.com/errata/RHSA-2026:20552'
    label: 'RHSA-2026:20552'
  - url: 'https://access.redhat.com/errata/RHSA-2026:20553'
    label: 'RHSA-2026:20553'
  - url: 'https://access.redhat.com/errata/RHSA-2026:20554'
    label: 'RHSA-2026:20554'
  - url: 'https://access.redhat.com/errata/RHSA-2026:20691'
    label: 'RHSA-2026:20691'
  - url: 'https://access.redhat.com/errata/RHSA-2026:25899'
    label: 'RHSA-2026:25899'
  - url: 'https://access.redhat.com/errata/RHSA-2026:25901'
    label: 'RHSA-2026:25901'
  - url: 'https://access.redhat.com/errata/RHSA-2026:25907'
    label: 'RHSA-2026:25907'
  - url: 'https://access.redhat.com/errata/RHSA-2026:26168'
    label: 'RHSA-2026:26168'
  - url: 'https://access.redhat.com/security/cve/CVE-2026-4887'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2451669'
    label: RHBZ#2451669
  - url: 'https://gitlab.gnome.org/GNOME/gimp/-/issues/15960'
tags:
  - cve.org
epss: 0.00645
epssPercentile: 0.51178
ingestedAt: '2026-11-05T22:38:32.040Z'
---

## Overview

A flaw was found in GIMP. This issue is a heap buffer over-read in GIMP PCX file loader due to an off-by-one error. A remote attacker could exploit this by convincing a user to open a specially crafted PCX image. Successful exploitation could lead to out-of-bounds memory disclosure and a possible application crash, resulting in a Denial of Service (DoS).

## Affected

- `gimp (all versions)`
- `gimp:2.8 (all versions)`
- `gimp:2.8 (all versions)`
- `gimp:2.8 (all versions)`
- `gimp:2.8 (all versions)`
- `gimp:2.8 (all versions)`
- `gimp:2.8 (all versions)`
- `gimp:2.8 (all versions)`
- `gimp:2.8 (all versions)`
- `gimp (all versions)`
- `gimp (all versions)`
- `gimp (all versions)`
- `gimp (all versions)`
- `gimp (all versions)`
- `gimp (all versions)`
- `gimp`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

### Workarounds

Users should avoid opening untrusted PCX image files with GIMP. If GIMP is not required, consider removing the `gimp` package to eliminate this attack vector.