Buffer Overflow in GIMP's ICO File Loader Affects Multiple Versions
CVE-2026-90948
7.8HIGH
What is CVE-2026-90948?
A vulnerability exists in GIMP's ICO file loader due to an integer overflow when processing ICO files with embedded PNG images. This results in the allocation of an insufficient buffer during size calculations, which can lead to a heap-based buffer overflow when the pixel data is written. An attacker could exploit this flaw by creating a specially crafted ICO file that, when opened in GIMP, may cause arbitrary code execution or trigger a crash in the application.
References
CVSS V3.1
Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Red Hat would like to thank hoyong jin for reporting this issue.