GIMP EUVD-2026-103187

Exploitation requires the victim to open or import a maliciously crafted image file in GIMP (UI:R), limiting this to a local, user-driven attack rather than remote server exploitation. The integer overflow is further gated by high attack complexity (AC:H), meaning the attacker must craft input with precise values to reliably trigger the overflow and achieve useful memory corruption. The specific file format, feature, or parsing path that triggers the overflow is not identifiable because the CVE description is unavailable ('[Unknown description]'); defenders should confirm the affected input type via GIMP issue #16314. No elevated privileges are needed (PR:N), but impact is bounded to the user account running GIMP (S:U).

This is a moderate-priority vulnerability that is unlikely to be a mass-exploitation threat. The CVSS 3.1 base score of 7.0 (HIGH) is driven by full CIA impact (C:H/I:H/A:H), consistent with memory corruption from an integer overflow (CWE-190). However, the exploitability metrics substantially temper real-world risk: AV:L means the attack is not network-reachable and requires the victim to open or process a malicious file locally, AC:H indicates the integer overflow requires specific conditions (e.g., precise crafted dimensions/offsets to win a heap-layout or wrap-around race) that are not reliably reproducible, and UI:R confirms a user must actively open the malicious input. There is no EPSS score, no CISA KEV listing, and no public POC provided in the input, so there is no evidence of active exploitation or weaponization. No vendor advisory text or affected-version data was supplied, and the description is missing ('[Unknown description]'), so the exact overflowing operation and affected GIMP versions could not be confirmed from the input. CONFLICT TO NOTE: the input Tags include 'Information Disclosure,' but the CVSS vector asserts full I:H and A:H (integrity and availability impact), which is broader than pure information disclosure - the vector implies potential code execution or crash, not merely data leakage; verify the true impact against the GNOME/GIMP issue tracker (gitlab.gnome.org/GNOME/gimp/-/issues/16314) and Red Hat Bugzilla #2554464.

An attacker crafts a malformed image file that triggers an integer overflow in GIMP's parsing/allocation logic and distributes it (email attachment, download, shared project asset). When a victim opens the file in GIMP, the overflow leads to an undersized allocation and subsequent memory corruption, potentially enabling code execution in the user's context or a crash. No public exploit code is identified in the provided data, and the high attack complexity (AC:H) makes reliable exploitation difficult.