A flaw was found in GIMP. Processing a specially crafted PVR image file with large dimensions can lead to a denial of service (DoS). This occurs due to a stack-based buffer overflow and an out-of-bounds read in the PVR image loader, causing the application to crash. Systems that process untrusted PVR image files are affected.
References
| Link | Resource |
|---|---|
| https://access.redhat.com/security/cve/CVE-2026-40918 | Vendor Advisory |
| https://bugzilla.redhat.com/show_bug.cgi?id=2458747 | Issue Tracking Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
28 Apr 2026, 18:23
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:gimp:gimp:-:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* |
|
| First Time |
Redhat
Redhat enterprise Linux Gimp gimp Gimp |
|
| References | () https://access.redhat.com/security/cve/CVE-2026-40918 - Vendor Advisory | |
| References | () https://bugzilla.redhat.com/show_bug.cgi?id=2458747 - Issue Tracking, Vendor Advisory |
15 Apr 2026, 20:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-04-15 20:16
Updated : 2026-04-28 18:23
NVD link : CVE-2026-40918
Mitre link : CVE-2026-40918
CVE.ORG link : CVE-2026-40918
JSON object : View
Products Affected
gimp
- gimp
redhat
- enterprise_linux
CWE
CWE-131
Incorrect Calculation of Buffer Size