CVE-2026-59088
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk18th percentile - higher than 18% of all known CVEs
Summary
GIMP has a signed integer overflow vulnerability in the file-fli plugin when processing FLI files, which can lead to application crashes.
Risk Assessment
A remote attacker can exploit this by tricking a user into opening a crafted FLI file, causing denial of service.
Recommendation
Update GIMP to a patched version and be cautious when opening FLI files from untrusted sources.
Original NVD description (English source)
A flaw was found in GIMP. A signed integer overflow vulnerability exists in the `file-fli` plugin when processing FLI image files. This occurs due to an incorrect calculation during memory allocation for image buffers, where the multiplication of image width and height can exceed the maximum integer value. A remote attacker could exploit this by tricking a user into opening a specially crafted FLI file, leading to the application crashing and resulting in a denial of service.