CVE-2026-79902 PUBLISHED

Gimp: stack vla size underflow denial of service in seattle

Assigner: redhat
Reserved: 25.08.2026 Published: 26.08.2026 Updated: 26.08.2026

A flaw was found in the Seattle FilmWorks plugin in GIMP. When processing a specially crafted SFW image file, the plugin allocates a Variable-Length Array (VLA) on the stack without integer overflow checks, causing an unbounded stack allocation. This issue leads to an application crash, resulting in a denial of service.

Metrics

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS Score: 5.5

Product Status

Vendor GNOME
Product GIMP
Versions Default: unaffected
  • affected from 3.1.4 to * (excl.)
Vendor Red Hat
Product Red Hat Enterprise Linux 6
Versions Default: unaffected
Vendor Red Hat
Product Red Hat Enterprise Linux 7
Versions Default: unaffected
Vendor Red Hat
Product Red Hat Enterprise Linux 8
Versions Default: unaffected
Vendor Red Hat
Product Red Hat Enterprise Linux 9
Versions Default: unaffected

Workarounds

To mitigate this vulnerability, do not open SFW files from untrusted sources with GIMP.

Credits

  • Red Hat would like to thank Zhixi "Jace" Sun for reporting this issue.

References

Problem Types

  • Integer Overflow or Wraparound CWE