Low severity2.5NVD Advisory· Published Sep 23, 2026· Updated Sep 25, 2026
CVE-2026-96546
CVE-2026-96546
Description
A one-byte out-of-bounds heap read flaw was found in GIMP's uncompressed DDS image loader. When a user opens an uncompressed DDS image, the file-dds plug-in performs an unconditional one-byte look-ahead after processing the final pixel. This may cause the plug-in to crash if the byte immediately following the pixel buffer is inaccessible; no information disclosure or code execution has been demonstrated.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- osv-coords2 versionspkg:rpm/opensuse/gimp&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/gimp&distro=openSUSE%20Tumbleweed
< 3.0.8-bp160.12.1+ 1 more
- (no CPE)range: < 3.0.8-bp160.12.1
- (no CPE)range: < 3.2.6-4.1
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.