The GIMP pcx loader on 32‑bit builds contains an integer overflow when the number of planes is set to four. If a crafted PCX file specifies large image dimensions, the calculated allocation size overflows, resulting in an undersized heap buffer. When the plugin writes image data into this buffer, a heap overflow occurs, corrupting memory and potentially enabling arbitrary code execution or denial of service.

Red Hat Enterprise Linux 6 through 9 ship a 32‑bit version of GIMP that includes the vulnerable pcx loader plugin. Any installation of GIMP on these RHEL releases that is not explicitly using a 64‑bit build is at risk if the plugin is loaded.

With a CVSS score of 7 the vulnerability is rated as high severity. The EPSS score is unavailable and the issue is not listed in CISA’s KEV catalog, indicating that no public exploits are currently known. The likely attack vector involves an attacker providing a crafted PCX file to a user who opens it in GIMP on a 32‑bit system, which could lead to arbitrary code execution or a denial of service locally.