ShellCodeX
Tools • Events • News • Insights
ShellCodeX vulnerability brief
HIGH Received

CVE-2026-59087

A flaw was found in the GIMP image manipulation program, specifically within its Seattle Filmworks file loader. A remote attacker could exploit this vulnerability by tricking a user into opening a specially crafted Seattle Filmworks file. This could lead to a heap overflow, allowing the attacker to write several kilobytes of controlled data beyond the intended memory buffer. Such an overflow can result in memory corruption, potentially leading to arbitrary code execution or a denial of service.

Published 10 Aug 2026, 11:17 UTC Last modified 10 Aug 2026, 11:17 UTC
01

Attack profile

The conditions required to exploit this vulnerability and its potential impact.

Attack vector Local
Attack complexity Low
Privileges required None
User interaction Required
Scope Unchanged
Confidentiality High
Integrity High
Availability High
Exploitability1.8
Impact5.9
02

Affected products

Product applicability statements supplied with the NVD record.

NVD has not published structured affected-product data for this record.
03

Weakness classification

CWE categories help security teams group the underlying software weakness.

04

Source references

External advisories, patches and technical reports attached to this CVE record.