Buffer Overflow Vulnerability in GIMP Affecting APNG File Parsing
CVE-2026-92183

7.8HIGH

Key Information:

Vendor

Gimp

Status
Vendor
CVE Published:
21 October 2026

What is CVE-2026-92183?

A buffer overflow vulnerability exists in the way GIMP parses APNG files. This flaw allows remote attackers to execute arbitrary code if a user opens a specially crafted APNG file or visits a malicious webpage. The issue stems from inadequate validation of the data size being copied to a stack buffer, enabling attackers to exploit this weakness and run code with the permissions of the affected application.

Affected Version(s)

GIMP 3.2.2

References

CVSS V3.0

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.