Nixpkgs security tracker

Login with GitHub
⚠️ You are using a production deployment that is still only suitable for demo purposes. Any work done in this might be wiped later without notice.

Suggestion detail

Untriaged
Permalink CVE-2026-66757
5.5 MEDIUM
  • CVSS version (CVSS): 3.1
  • Attack Vector (AV): Local (L)
  • Attack Complexity (AC): Low (L)
  • Privileges Required (PR): None (N)
  • User Interaction (UI): Required (R)
  • Scope (S): Unchanged (U)
  • Confidentiality (C): None (N)
  • Integrity (I): None (N)
  • Availability (A): High (H)
  • Modified Attack Vector (MAV): Local (L)
  • Modified Attack Complexity (MAC): Low (L)
  • Modified Privileges Required (MPR): None (N)
  • Modified User Interaction (MUI): Required (R)
  • Modified Confidentiality (MC): None (N)
  • Modified Scope (MS): Unchanged (U)
  • Modified Integrity (MI): None (N)
  • Modified Availability (MA): High (H)
created 1 month ago Activity log
  • Created suggestion 1 month ago
Gimp: signed integer overflow in file-sgi (sgi-lib) causes the plugin to crash on rle sgi images

A flaw was found in the file-sgi plugin in GIMP. When processing an RLE-compressed SGI image, the plugin allocates memory for a row table. The image header dimensions (ysize and zsize) are read as 16-bit unsigned integers. If a crafted file sets both dimensions to their maximum value (65535), the multiplication ysize * zsize overflows the standard 32-bit int boundary before being passed to calloc. This integer overflow issue results in undefined behavior, aborting the plugin and causing a denial of service.

References

Affected products

gimp
gimp:2.8/gimp

Matching in nixpkgs

pkgs.gimp

GNU Image Manipulation Program

  • nixos-unstable -
    • nixos-unstable-small 3.2.4
  • nixos-26.05 -
    • nixos-26.05-small 3.0.8

pkgs.gimp2

GNU Image Manipulation Program

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gimp3

GNU Image Manipulation Program

  • nixos-unstable -
    • nixos-unstable-small 3.2.4
  • nixos-26.05 -
    • nixos-26.05-small 3.0.8

pkgs.zigimports

Automatically remove unused imports and globals from Zig files

  • nixos-unstable -
    • nixos-unstable-small 0.1.0
  • nixos-26.05 -
    • nixos-26.05-small 0.1.0

pkgs.gimpPlugins.gimp

GNU Image Manipulation Program

  • nixos-unstable -
    • nixos-unstable-small 3.2.4
  • nixos-26.05 -
    • nixos-26.05-small 3.0.8

pkgs.gimpPlugins.gmic

GIMP plugin for the G'MIC image processing framework

  • nixos-unstable -
    • nixos-unstable-small 3.5.0
  • nixos-26.05 -
    • nixos-26.05-small 3.5.0

pkgs.gimp-with-plugins

GNU Image Manipulation Program

  • nixos-unstable -
    • nixos-unstable-small 3.2.4
  • nixos-26.05 -
    • nixos-26.05-small 3.0.8

pkgs.gimp2Plugins.bimp

Batch Image Manipulation Plugin for GIMP

  • nixos-unstable -
    • nixos-unstable-small 2.6
  • nixos-26.05 -
    • nixos-26.05-small 2.6

pkgs.gimp2Plugins.gmic

GIMP plugin for the G'MIC image processing framework

  • nixos-unstable -
    • nixos-unstable-small 3.5.0
  • nixos-26.05 -
    • nixos-26.05-small 3.5.0

pkgs.gimp2Plugins.fourier

GIMP plug-in to do the fourier transform

  • nixos-unstable -
    • nixos-unstable-small 0.4.3
  • nixos-26.05 -
    • nixos-26.05-small 0.4.3

Package maintainers