CVE-2026-106065

A heap-based buffer overflow was found in GIMP’s PCX export plug-in. For images with extremely large width and height, buffer allocation uses overflowing 32-bit width * height arithmetic while subsequent GEGL operations use the full extent, after integer overflow in size calculation

A heap-based buffer overflow was found in GIMP when exporting to PCX. Exporting an oversized image can result in a heap buffer that is too small for the written pixel data, which may crash GIMP or corrupt memory. Triggering the flaw requires the user to export a sufficiently large image.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Restrict PCX export to trusted images and reasonable dimension limits