Integer Overflow Vulnerability in GIMP Affecting ANI File Parsing

CVE-2026-4151

What is CVE-2026-4151?

A vulnerability in GIMP allows remote code execution due to integer overflow during the parsing of ANI files. Malicious actors can exploit this flaw by tricking users into visiting a compromised page or opening a specific malicious file. The insufficient validation of user-supplied data leads to an overflow before buffer allocation, which could enable the execution of arbitrary code in the context of the current process. Users are advised to remain vigilant and apply patches provided by the vendor promptly.

References