Is CVE-2026-66757 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-66757 being exploited in the wild.

How severe is CVE-2026-66757?

Medium severity, with a CVSS score of 5.5, published 27 July 2026.

Which products and versions are affected?

GNOME GIMP 3.2.4; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8; Red Hat Red Hat Enterprise Linux 9.

Is there a fix for CVE-2026-66757?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-66757 attacked?

It is attacked with local access, in a network appliance.

Am I affected by CVE-2026-66757?

Check whether you run Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8 or Red Hat Enterprise Linux 9. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-66757: GNOME GIMP integer overflow in file-sgi plugin

CVE-2026-66757 · Severity: medium · CVSS 5.5 · Published 2026-07-27

A vulnerability in GIMP's SGI image processing plugin allows a specially crafted image file to crash the application. GIMP is a popular open-source image editor used for graphic design and photo manipulation. If a user attempts to open a malicious SGI image, the software will terminate unexpectedly, potentially leading to a loss of unsaved work and a disruption of operations.

Technologies: Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9. Vendors: Red Hat.

Quick answers

Is CVE-2026-66757 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-66757 being exploited in the wild.
How severe is CVE-2026-66757?: Medium severity, with a CVSS score of 5.5, published 27 July 2026.
Which products and versions are affected?: GNOME GIMP 3.2.4; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8; Red Hat Red Hat Enterprise Linux 9.
Is there a fix for CVE-2026-66757?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-66757 attacked?: It is attacked with local access, in a network appliance.
Am I affected by CVE-2026-66757?: Check whether you run Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8 or Red Hat Enterprise Linux 9. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

An integer overflow vulnerability exists in the `file-sgi` plugin of GIMP within `plug-ins/file-sgi/sgi-lib.c`. The flaw occurs when the plugin reads 16-bit unsigned integer dimensions (ysize and zsize) from an RLE-compressed SGI image header. When both values are set to 65535, their multiplication overflows a standard 32-bit signed integer before being passed to `calloc`. This results in undefined behavior and a subsequent abort of the plugin process. An attacker can exploit this by providing a crafted SGI file to a user, resulting in a denial of service (application crash). The issue was confirmed in GIMP version 3.2.4.

Affected products

GNOME GIMP 3.2.4
Red Hat Red Hat Enterprise Linux 7
Red Hat Red Hat Enterprise Linux 8
Red Hat Red Hat Enterprise Linux 9

Timeline

2026-07-27: disclosed: Vulnerability reported via Red Hat Bugzilla and GNOME GitLab.
2026-07-27: advisory: CVE-2026-66757 published.

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.