CVE-2026-59088— Gimp: gimp: denial of service via signed integer overflow in fli file processing
Quick assessment
Affected
CVE-2026-59088
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
GIMP是GIMP组织开源的一款图像编辑软件。 GIMP存在数字错误漏洞，该漏洞源于file-fli插件在处理FLI图像文件时存在有符号整数溢出，内存分配时图像宽度和高度相乘超过最大整数值，可能导致远程攻击者诱骗用户打开特制FLI文件，造成拒绝服务。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 5
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| None | None | 3.2.4 |
affected |
| Red Hat | Red Hat Enterprise Linux 6 | any |
unknown |
| Red Hat | Red Hat Enterprise Linux 7 | any |
unknown |
| Red Hat | Red Hat Enterprise Linux 8 | any |
affected |
| Red Hat | Red Hat Enterprise Linux 9 | any |
affected |
I. Basic Information for CVE-2026-59088
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Gimp: gimp: denial of service via signed integer overflow in fli file processing
Source: CVE Program / CVE List V5
Vulnerability Description
A flaw was found in GIMP. A signed integer overflow vulnerability exists in the `file-fli` plugin when processing FLI image files. This occurs due to an incorrect calculation during memory allocation for image buffers, where the multiplication of image width and height can exceed the maximum integer value. A remote attacker could exploit this by tricking a user into opening a specially crafted FLI file, leading to the application crashing and resulting in a denial of service.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
整数溢出或超界折返
Source: CVE Program / CVE List V5
Vulnerability Title
GIMP 数字错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
GIMP是GIMP组织开源的一款图像编辑软件。 GIMP存在数字错误漏洞，该漏洞源于file-fli插件在处理FLI图像文件时存在有符号整数溢出，内存分配时图像宽度和高度相乘超过最大整数值，可能导致远程攻击者诱骗用户打开特制FLI文件，造成拒绝服务。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | - | 3.2.4 | - |
|
| Red Hat | Red Hat Enterprise Linux 6 | - |
cpe:/o:redhat:enterprise_linux:6
|
|
| Red Hat | Red Hat Enterprise Linux 7 | - |
cpe:/o:redhat:enterprise_linux:7
|
|
| Red Hat | Red Hat Enterprise Linux 8 | - |
cpe:/o:redhat:enterprise_linux:8
|
|
| Red Hat | Red Hat Enterprise Linux 9 | - |
cpe:/o:redhat:enterprise_linux:9
|
|
II. Public POCs for CVE-2026-59088
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-59088
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-59088 (2)
Other References for CVE-2026-59088 (1)
IV. Related Vulnerabilities
Same weakness: CWE-190
-
CVE-2026-62438
Gimp: gimp: paa integer overflow out-of-bounds read -
CVE-2026-62439
Gimp: gimp: file-pvr plug-in pvr file parsing integer overfl -
CVE-2026-102834
JavaCV: Integer Overflow in IPCameraFrameGrabber Causes Infi -
CVE-2026-102692
RIOT: Potential integer overflow in nanocoap Block2 handling -
CVE-2026-57488
pupnp: Integer truncation in HTTP Content-Length parsing ena
V. Comments for CVE-2026-59088
No comments yet