Fluid Attacks Database

Description

An out-of-bounds heap read flaw was found in GIMP's TIM image loader. When a user opens a crafted 4bpp TIM image that causes promotion to an RGBA layer, the file-tim plug-in allocates an undersized row buffer but processes it using the larger RGBA row size. This can copy adjacent heap contents into the decoded image and may crash the plug-in.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version
debian 14	gimp	=3.0.4-3 \|\| =3.0.4-4 \|\| =3.0.4-5 \|\| =3.0.4-6 \|\| =3.0.4-6.1 \|\| =3.0.4-6.2 \|\| =3.0.6-1 \|\| =3.2.0-1 \|\| =3.2.0~rc2-1 \|\| =3.2.0~rc2-2 \|\| =3.2.0~rc2-3 \|\| =3.2.0~rc2-3.1 \|\| =3.2.0~rc2-3.2 \|\| =3.2.0~rc2-3.3 \|\| =3.2.0~rc3-1 \|\| =3.2.2-1 \|\| =3.2.4-1 \|\| =3.2.4-2 \|\| =3.2.4-3 \|\| =3.2.6-1
rpm rhel9	gimp	-
rpm rhel10	gimp	-
rpm rhel6	gimp	-
rpm rhel7	gimp	-
rpm rhel8	gimp	-

Aliases

1. CVE-2026-965452. NVD-2026-965453. OSV-DEBIAN-2026-965454. OSV-2026-965455. SECURITY-TRACKER-CVE-2026-96545

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.