A heap-based buffer overflow was found in GIMP’s DICOM export plug-in. When exporting an image with extremely large width and height, the export path allocates a buffer using a 32‑bit width * height (and bytes‑per‑pixel) product that can overflow. GEGL then writes the full uncompressed extent into the undersized buffer, after integer overflow in the allocation size, causing memory corruption that could lead to application crashes or unintended behavior.

The flaw affects GIMP installations bundled with Red Hat Enterprise Linux 6 through 10, including Red Hat Enterprise Linux 6, 7, 8, 9 and 10. Any system running these distributions and allowing image export to DICOM is vulnerable.

The CVSS score of 6.3 indicates moderate severity, and the EPSS score of < 1% indicates a very low exploitation probability. The vulnerability is not listed in CISA’s KEV catalog. The attack is likely to require access to a process that performs a DICOM export, such as a local application or a service that accepts user‑supplied images. Because the CVE description does not confirm any remote exploitation mechanism, the risk is considered limited to local or privileged contexts, though memory corruption could still impact application stability.