[ CVE-2026-103641 · Published 1 Oct 2026 ]

Vulnerability in Red Hat Enterprise Linux 10

CVSS 5.5 EPSS <1%No fix listed yet

[ Description ]Official description

A flaw was found in GEGL. The Radiance HDR loader reads past the end of a memory-mapped image when an uncompressed scanline is shorter than the width declared in the file header. Opening a crafted HDR file crashes the application that uses the loader.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.