SUSE Patches Out of Bounds Write in GIMP GIMPressionist Plugin Across Leap and Enterprise 15
SUSE has published advisory SUSE-SU-2026:4653-1, rated important, correcting a single memory-corruption flaw in the GIMP image editor. The issue is tracked as CVE-2026-97185 and carries a CVSS v3.1 base score of 7.8 from both SUSE and NVD, with the vector AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. The flaw is an out-of-bounds write in the GIMPressionist plugin that is reached through a crafted preset file, and it is tracked internally as bsc#1282596. Affected products are openSUSE Leap 15.4, SUSE Linux Enterprise Desktop 15 SP7, SUSE Linux Enterprise Real Time 15 SP7, SUSE Linux Enterprise Server 15 SP7, SUSE Linux Enterprise Server for SAP Applications 15 SP7, SUSE Linux Enterprise Workstation Extension 15 SP7, and SUSE Package Hub 15 SP7. Fixed builds are shipped as gimp 2.10.30-150400.3.82.1 along with the matching libgimp-2_0-0 and libgimpui-2_0-0 libraries.
GIMPressionist is a bundled artistic-effects plugin that loads its brush and paper settings from preset files stored in the user's GIMP profile. According to the advisory, a preset file crafted by an attacker drives the plugin to write past the bounds of an allocated buffer, corrupting adjacent memory with attacker-influenced data. The published CVSS vector describes the practical conditions: the attack is local, needs no prior privileges, and requires user interaction, meaning someone has to open or apply the malicious preset inside GIMP for the flaw to trigger. The same vector records high impact to confidentiality, integrity and availability within the affected process scope. SUSE has not published proof-of-concept code or further exploitation detail beyond the out-of-bounds write itself.
The practical exposure sits on graphical workstations and developer desktops, which is where the Workstation Extension and Leap packages land, with Package Hub extending the same code to aarch64, ppc64le and s390x systems where GIMP may be installed on servers with a desktop stack. Preset files are the kind of artifact users treat as harmless configuration and freely trade through forums, asset bundles and chat, so they bypass the instinctive caution applied to executables. The requirement for user interaction rules out remote mass exploitation, but it fits well with targeted social engineering against design, media or documentation teams. FIRST EPSS currently places the probability of exploitation in the next 30 days at 0.1 percent for CVE-2026-97185, and no in-the-wild activity has been reported by the vendor. Until the updated packages are present, every unpatched host keeps a file-triggered memory-corruption path inside a commonly installed desktop application.
Attack Surface
Endpoint, Endpoint OS
Tactics
Execution, Initial Access
Techniques
- T1203 – Exploitation for Client Execution
- T1204.002 – User Execution: Malicious File
- T1566.001 – Phishing: Spearphishing Attachment
SuperPRO's Threat Countermeasures Procedures
- Install the fixed GIMP build 2.10.30-150400.3.82.1 on openSUSE Leap 15.4 with 'zypper in -t patch SUSE-2026-4653', which closes the CVE-2026-97185 out-of-bounds write in the GIMPressionist plugin.
- On SUSE Linux Enterprise Workstation Extension 15 SP7 run 'zypper in -t patch SUSE-SLE-Product-WE-15-SP7-2026-4653', and on SUSE Package Hub 15 SP7 run 'zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-4653'.
- Inventory the estate with 'rpm -q gimp libgimp-2_0-0 libgimpui-2_0-0 gimp-lang' and flag any host below release 150400.3.82.1; on x86_64 systems also confirm libgimp-2_0-0-32bit and libgimpui-2_0-0-32bit were updated to the same build, since the 32-bit libraries ship separately.
- Where the patch cannot be scheduled immediately, remove or rename the gimpressionist plug-in binary from the GIMP 2.0 plug-ins directory so the vulnerable preset parser is never loaded, and restore it only after the updated package is installed.
- Treat GIMPressionist preset files received by email, chat or download as untrusted content: quarantine them at the mail gateway and alert when preset files appear under a user's GIMP profile directory (~/.config/GIMP/2.10/gimpressionist) written by a process other than gimp itself.
- Add an EDR rule that alerts on gimp terminating with SIGSEGV or on the gimp process spawning a shell, interpreter or network client as a child, as these are the observable outcomes of a successful memory-corruption attempt against the plugin.
