CVE-2026-42169 HIGH

CVE-2026-42169: Gimp: gimp apng loader heap-buffer-overflow when fctl width exceeds ihdr width (file-png.c)

Vendor Red Hat
Product Red Hat Enterprise Linux 6
Weakness CWE-131
Published August 4, 2026
Last update August 5, 2026

CVSS base score

7.3/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction Required
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

A heap-buffer-overflow vulnerability exists in the APNG (Animated PNG) file loader of GIMP. This flaw occurs when the `fcTL` width exceeds the `IHDR` width, leading to pixel data being written past the end of a heap allocation. Additionally, a heap-based buffer overflow exists in the DDS plug-in due to a BPP mismatch in the `load_layer()` function. Both vulnerabilities can be triggered by opening a specially crafted image file, potentially leading to code execution.

Key dates

02Disclosure timeline

August 4, 2026 CVE published
August 5, 2026 Record updated