CVE-2026-62438
Medium
Description
A flaw was found in GIMP. An attacker can cause a Denial of Service (DoS) or potentially disclose sensitive memory contents by convincing a user to open or preview a specially crafted Bohemia Interactive (PAA) texture file. Due to an integer overflow when calculating image dimensions during file decompression, the application allocates an undersized memory buffer. Subsequent processing reads memory past the buffer boundary, terminating the plug-in process unexpectedly.
SeverityMedium
CVSS6.1
Exploit probability—
Product
Red Hat Enterprise Linux 10
PublishedOct 16, 2026
First seenOct 16, 2026
Weakness typeCWE-190Integer overflow
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat Red Hat Enterprise Linux 10 | No range specified | — |
| Red Hat Red Hat Enterprise Linux 7 | No range specified | — |
| Red Hat Red Hat Enterprise Linux 8 | No range specified | — |
| Red Hat Red Hat Enterprise Linux 9 | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.