A flaw was found in GIMP.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Apr 15, 2026 · NIST NVD

   Detected

   A flaw was found in GIMP. Processing a specially crafted PVR image file with large dimensions can lead to a denial of service (DoS). This occurs due to a stack-based buffer overflow and an out-of-bounds read in the PVR image loader, causing the application to crash. Systems that process untrusted PVR image files are affected.

2. Jun 17, 2026 · NIST NVD

   Updated

   A flaw was found in GIMP. Processing a specially crafted PVR image file with large dimensions can lead to a denial of service (DoS). This occurs due to a stack-based buffer overflow and an out-of-bounds read in the PVR image loader, causing the application to crash. Systems that process untrusted PVR image files are affected.

Affected

• cpe gimp/gimpversion unspecified
• cpe redhat/enterprise linux6.0
• cpe redhat/enterprise linux7.0
• cpe redhat/enterprise linux8.0
• cpe redhat/enterprise linux9.0

Sources

• CVE.orgVulnerability recordCVE-2026-40918

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-40918

  A flaw was found in GIMP. Processing a specially crafted PVR image file with large dimensions can lead to a denial of service (DoS). This occurs due to a stack-based buffer overflow and an out-of-bounds read in the PVR image loader, causing the application to crash. Systems that

  nvd.nist.gov

References

• Vendor Advisory · access.redhat.com
• Issue Tracking · bugzilla.redhat.com