{"affected":[{"defaultStatus":"affected","ecosystem":"https://gitlab.gnome.org/GNOME/gimp","packageName":"gimp","product":"GIMP","source":"CNA: redhat","vendor":"GNOME","versions":[]},{"defaultStatus":"unknown","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"gimp","product":"Red Hat Enterprise Linux 6","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"unaffected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"gimp","product":"Red Hat Enterprise Linux 7","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"unaffected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"gimp:2.8/gimp","product":"Red Hat Enterprise Linux 8","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"unaffected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"gimp","product":"Red Hat Enterprise Linux 9","source":"CNA: redhat","vendor":"Red Hat","versions":[]}],"cveId":"CVE-2026-78465","cwes":["CWE-190"],"description":"A flaw was found in the file-pcx plugin in GIMP, affecting 32-bit builds only. When processing a PCX image file, the plugin calculates memory allocation sizes based on the image dimensions and the number of color planes. If a crafted file sets the number of planes to 4 alongside sufficiently large dimensions, the calculation exceeds the 32-bit integer limit and overflows, resulting in an undersized heap-based buffer allocation. This integer overflow issue results in a heap-based buffer overflow when the plugin subsequently writes image data into the undersized buffer, causing memory corruption, potentially leading to arbitrary code execution or a denial of service.","epss":{"date":"2026-11-04","percentile":0.20674,"score":0.00281},"exploits":[{"kind":"exploit","source":"ADP: CISA-ADP","url":"https://gitlab.gnome.org/GNOME/gimp/-/work_items/16578"}],"kev":null,"metrics":[{"score":7,"severity":"high","source":"CNA: redhat","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"}],"modifiedAt":1793835467751,"publishedAt":1787588892574,"references":[{"source":"CNA: redhat","tags":["vdb-entry","x_refsource_REDHAT"],"url":"https://access.redhat.com/security/cve/CVE-2026-78465"},{"source":"CNA: redhat","tags":["issue-tracking","x_refsource_REDHAT"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2522057"},{"source":"CNA: redhat","tags":[],"url":"https://gitlab.gnome.org/GNOME/gimp/-/work_items/16578"},{"source":"ADP: CISA-ADP","tags":["exploit"],"url":"https://gitlab.gnome.org/GNOME/gimp/-/work_items/16578"}],"remediation":[{"kind":"workaround","source":"CNA: redhat","text":"To mitigate this vulnerability, do not open PCX files from untrusted sources with GIMP."}],"revision":"af9aac21070d8ef4b45ddfde2e2f0a2fa1ddd7f9e25e6984b0d8c9ae209b69ee","sources":[{"modifiedAt":1793835467751,"name":"CNA: redhat","retrievedAt":1793837350345,"url":"https://www.cve.org/CVERecord?id=CVE-2026-78465"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793837358730,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-78465"}],"ssvc":{"assessedAt":1787594409876,"automatable":"no","exploitation":"poc","source":"ADP: CISA-ADP","technicalImpact":"total"},"status":"published","title":"Gimp: integer overflow in pcx loader (planes=4) leads to heap overflow on 32-bit","updatedAt":1793837358730}