High severity7.3NVD Advisory· Published Aug 4, 2026· Updated Aug 6, 2026
CVE-2026-42169
CVE-2026-42169
Description
A heap-buffer-overflow vulnerability exists in the APNG (Animated PNG) file loader of GIMP. This flaw occurs when the fcTL width exceeds the IHDR width, leading to pixel data being written past the end of a heap allocation. Additionally, a heap-based buffer overflow exists in the DDS plug-in due to a BPP mismatch in the load_layer() function. Both vulnerabilities can be triggered by opening a specially crafted image file, potentially leading to code execution.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- osv-coords2 versions
< 2:3.0.4-4.el9_8.9+ 1 more
- (no CPE)range: < 2:3.0.4-4.el9_8.9
- (no CPE)range: < 2:3.0.4-4.el9_8.9
Patches
Vulnerability mechanics
References
3News mentions
0No linked articles in our index yet.