CVE-2026-4887
MEDIUM
NVD
CVSS Score
6.1
Severity
MEDIUM
Published
Mar 26, 2026
Vendor
unknown
Description
A flaw was found in GIMP. This issue is a heap buffer over-read in GIMP PCX file loader due to an off-by-one error. A remote attacker could exploit this by convincing a user to open a specially crafted PCX image. Successful exploitation could lead to out-of-bounds memory disclosure and a possible application crash, resulting in a Denial of Service (DoS).