Heap-based Buffer Overflow in GIMP Affects Users Engaging with ICO Files

CVE-2026-0797

What is CVE-2026-0797?

A flaw in GIMP's parsing of ICO files enables remote code execution, allowing malicious actors to exploit heap-based buffer overflow vulnerabilities. The vulnerability arises from inadequate validation of user-supplied data length before copying it to a heap buffer. Successful exploitation requires user interaction, such as visiting a malicious web page or opening an infected file, potentially compromising the integrity of the affected system. For more information, check the ZDI advisory and vendor notes.

References