Heap Buffer Overflow in GIMP's APNG File Loader and DDS Plug-in
CVE-2026-42169
Key Information:
- Vendor
Red Hat
- Status
- Vendor
- CVE Published:
- 4 August 2026
What is CVE-2026-42169?
A heap buffer overflow vulnerability exists in GIMP's Animated PNG (APNG) file loader which can be exploited when the 'fcTL' width surpasses the 'IHDR' width. This flaw allows for pixel data being written beyond the allocated heap space. Additionally, a separate heap buffer overflow issue is present in the DDS plug-in, stemming from a bits-per-pixel (BPP) mismatch in the 'load_layer()' function. Both vulnerabilities are triggered by opening a specially crafted image file, posing a risk of code execution by malicious actors.
Affected Version(s)
Red Hat Enterprise Linux 9 2:3.0.4-4.el9_8.9
Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions 2:2.99.8-4.el9_4.19
Red Hat Enterprise Linux 9.6 Extended Update Support 2:2.99.8-4.el9_6.20
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved