CVE-2026-58388

A flaw was found in GIMP's Seattle FilmWorks (SFW94A) loader. A stack-based out-of-bounds write occurs in load_image() because a stack buffer sized as file_size - 0xE0 is later indexed using bounds based on file_size. This can corrupt stack memory and potentially lead to denial of service or arbitrary code execution.

A flaw was found in GIMP's Seattle FilmWorks (SFW94A) loader. The load_image() function allocates a stack buffer for file data but later uses larger bounds derived from the full file size, allowing stack memory corruption when a user opens a specially crafted SFW file.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.