A heap-based buffer overflow was found in GIMP’s DirectDraw Surface (DDS) loader. When loading a crafted DDS image, buffer sizes derived from width, height, and pitch can be computed using 32-bit arithmetic that overflows. The allocated buffer is too small for the amount of pixel data written through GEGL, following integer overflow in size calculations. This may allow heap corruption and, in the worst case, arbitrary code execution in the context of the GIMP process.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4895-1 advisory.

    - CVE-2026-82328: undersized palette memory allocations in the ICO loader can cause heap out-of-bounds     reads       (bsc#1277618).
    - CVE-2026-82343: improper channel-count handling in the PSD loader can cause heap and stack out-of-bounds     reads       (bsc#1277622).
    - CVE-2026-106061: integer overflow in the X cursor thumbnail loader leads to out-of-bounds read and     process crash when       generating a thumbnail for a crafted XMC file (bsc#1284473).
    - CVE-2026-106062: heap-based buffer overflow in DirectDraw Surface loader when loading a crafted DDS     image       (bsc#1284474).
    - CVE-2026-106063: heap-based buffer overflow in the DICOM export plug-in when exporting an image with     extremely large       width and height (bsc#1284475).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22123-1 advisory.

    Changes in gimp:

    - CVE-2026-106061: plug-ins: Bound allocation for XMC import (bsc#1284473)
    - CVE-2026-106062: plug-ins/file-dds: fix out of bounds write (bsc#1284474)
    - CVE-2026-106063: plug-ins: Add bounds checks for DICOM export (bsc#1284475)
    - CVE-2026-82324: plug-ins: Add more checks for IFF import (bsc#1277594)
    - CVE-2026-82328: plug-ins: Use BPP for ICO palette allocation (bsc#1277618)
    - CVE-2026-82343: plug-ins: fix heap out of bounds in PSD loader (bsc#1277622)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A heap-based buffer overflow was found in GIMP's DirectDraw Surface (DDS) loader. When loading a crafted     DDS image, buffer sizes derived from width, height, and pitch can be computed using 32-bit arithmetic that     overflows. The allocated buffer is too small for the amount of pixel data written through GEGL, following     integer overflow in size calculations. This may allow heap corruption and, in the worst case, arbitrary     code execution in the context of the GIMP process. (CVE-2026-106062)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
371935	SUSE SLED15: gimp / gimp-devel / gimp-lang / gimp-plugin-aa / libgimp-2_0-0 / etc (SUSE-SU-2026:4895-1)	Nessus	SuSE Local Security Checks	Local	high
367235	openSUSE 16: gimp / gimp-devel / gimp-extension-goat-excercises / gimp-lang / etc (openSUSE-SU-2026:22123-1)	Nessus	SuSE Local Security Checks	Local	high
363639	Linux Distros Unpatched Vulnerability : CVE-2026-106062	Nessus	Misc.	Local	high

Detections

Analytics

CVE-2026-106062

high

Tenable Plugins

high

high

high