Skip to content
Multiple Vulnerabilities in GIMP: CVE-2026-106062 and CVE-2026-62439

Multiple Vulnerabilities in GIMP: CVE-2026-106062 and CVE-2026-62439

First seen 17 Oct 2026, 16:47 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 17, 2026 at 18:20 UTC
  • •CVE-2026-106062 and CVE-2026-62439 affect GIMP's image processing capabilities.
  • •Both vulnerabilities can lead to heap-based buffer overflows and potential code execution.
  • •Users are advised to apply patches promptly and avoid untrusted image files.

Two significant vulnerabilities have been identified in GIMP, affecting its DDS and PowerVR file handling capabilities. CVE-2026-106062, published on October 6, 2026, involves a heap-based buffer overflow in the DDS loader, potentially allowing arbitrary code execution when a user opens a crafted DDS image. CVE-2026-62439, published on October 16, 2026, also presents a heap-based buffer overflow due to an integer overflow in the file-pvr plug-in, which can lead to application crashes or code execution. Both vulnerabilities primarily affect workstations and shared systems where users open untrusted image files. The risk is elevated for systems processing external images, but there is currently no confirmed active exploitation of these vulnerabilities. Users are advised to apply security updates as soon as they are available and to avoid opening untrusted files until then.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-06
CVE-2026-106062 published
Heap-based buffer overflow found in GIMP's DDS loader, allowing potential code execution.
Redpacketsecurity
2026-10-16
CVE-2026-62439 published
Integer overflow in GIMP's file-pvr plug-in leads to heap-based buffer overflow risks.
Redpacketsecurity

More articles in this cluster (4)

Following this threat?

Track CVE-2026-106062 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (9)

1 / 3

Common questions

What versions of GIMP are affected?
The vulnerabilities affect GIMP versions that utilize the DDS and PowerVR file handling capabilities.
Is there active exploitation of these vulnerabilities?
Currently, there is no confirmed active exploitation reported for these vulnerabilities.
What should I do to protect my systems?
Apply the security updates as soon as they are available and avoid opening untrusted image files until patched.