OCTOBER 9, 2026
Live Feed
Back to database
Case File

CVE-2026-97185

HIGH · CVSS 7.8 EPSS 0.14% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-09-24 · Last synced 2026-10-09

CyberRota Analysis

AI-Generated

A vulnerability in GIMP allows for out-of-bounds writes when processing specially crafted GIMPressionist preset files due to improper validation of vector indices. This flaw can lead to memory corruption, potentially resulting in application crashes or arbitrary code execution. Users and organizations utilizing GIMP, particularly those in creative and design environments, should prioritize patching this issue to mitigate the risk of exploitation.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit arbitrary code execution code execution

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-97185
Severity
HIGH
CVSS
7.8
EPSS
0.14%

Original NVD Description

A flaw was found in GIMP. When processing a specially crafted GIMPressionist preset file, the plug-in does not properly validate vector indices before writing into fixed-size arrays. This can lead to an out-of-bounds write, corrupting memory. An attacker could exploit this by convincing a user to load a malicious preset file, potentially causing a crash or enabling arbitrary code execution.