Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A heap-based buffer overflow vulnerability exists in the GIMP DDS (DirectDraw Surface) file parser. When a crafted DDS file declares a D3D9 pixel format but sets a lower bits-per-pixel (bpp) value in the header, the loader allocates an undersized heap buffer. Subsequent pixel data consumption at the real format's stride causes a write past the heap buffer boundary, leading to heap metadata corruption and potential code execution.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
4 versions affected across 1 product
CVE-2026-42170: GIMP DDS File Parser Heap Overflow - What It Means for Your Business and How to Respond https://hubs.li/Q04z5rl90
Post summary
The text announces CVE-2026-42170, a GIMP DDS File Parser Heap Overflow, and frames it as a business response topic. It provides the vulnerability type but names no PoC, exploit, active exploitation, or specific remediation within the visible text.
🔐 🚨 GIMP DDS Parser Heap Overflow — CVSS 7.8 CVE-2026-42170: Crafted DDS file → heap overflow → code execution. No official patch yet. Avoid untrusted DDS files. → http://threataft.com/articles/gimp-cve-2026-42170-dds-heap-overflow #cybersecurity #infosec #GIMP #Vulnerability #ThreatIntel
Post summary
The post announces a new GIMP DDS parser heap‑overflow vulnerability (CVE-2026-42170), details its technical impact, notes no patch is available, and advises users to avoid untrusted DDS files. No PoC, exploit, or active exploitation is claimed.
🔥 New GIMP vulnerability can lead to memory corruption CVE-2026-42170 affects GIMP's DDS image parser. A specially crafted DDS image can trigger a heap-based buffer overflow, potentially causing memory corruption and possible code execution. 📊 CVSS: 7.8 High 📅 CVE published: August 8 🔎 Source: Red Hat / CVE / Vulners. #GIMP #CVE #MemorySafety #CyberSecurity
Post summary
The post announces the newly disclosed GIMP CVE‑2026‑42170, detailing a heap‑based buffer overflow that can lead to memory corruption and potential code execution, yet it does not provide a PoC, exploit code, or patch.
4 of 4 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | redhat | enterprise_linux | 6.0 | - | - |
| OS | redhat | enterprise_linux | 7.0 | - | - |
| OS | redhat | enterprise_linux | 8.0 | - | - |
| OS | redhat | enterprise_linux | 9.0 | - | - |