CVE-2026-103641
A flaw was found in GEGL. The Radiance HDR loader reads past the end of a memory-mapped image when an uncompressed scanline is shorter than the width declared in the file header. Opening a crafted HDR file crashes the application that uses the loader.
- Published Oct 1, 2026
- CVSS 5.5 medium
- 0.1% chance of exploitation in the next 30 days (EPSS)