CVE-2026-66758

설명

A flaw was found in the file-fits plugin in GIMP. When processing a FITS image file, the plugin calculates memory allocation sizes using signed 32-bit integers for width and height. If a crafted file sets both values to large values, their product exceeds 2^31 and overflows, resulting in an undersized heap-based buffer allocation. This integer overflow issue results in a heap-based buffer overflow when cfitsio subsequently writes a full row of pixels in the buffer, causing memory corruption, potentially leading to arbitrary code execution or a denial of service.

영향 제품·버전

제품 GNOME GIMP, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7

영향 버전 GNOME GIMP, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7 · 영향 버전은 공급사 공식자료 확인 필요

수정 버전 GNOME GIMP, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7 · 수정 버전은 공급사 공식자료 확인 필요

기술 정보

CVSS 벡터 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE CWE-190