CVE-2026-82328: Out-of-bounds Read in GNOME GIMP

The vulnerability CVE-2026-82328 affects the file-ico plugin in GNOME GIMP. It arises from improper validation of the used_clrs parameter, which represents the palette count in ICO image files. This incorrect validation leads to improper memory bounds checking and a heap out-of-bounds read. The flaw can cause application crashes (denial of service) or limited disclosure of heap memory contents. Exploitation requires local user interaction by opening a crafted ICO file. The CVSS v3.1 score is 6.1 (medium severity) with attack vector local, low complexity, no privileges required, user interaction required, and impact on confidentiality (low) and availability (high). Red Hat's advisory confirms the issue but does not state a patch or fix availability. The recommended mitigation is to avoid opening ICO files from untrusted sources.

Successful exploitation can cause GIMP to crash, resulting in denial of service. Additionally, limited heap memory contents may be disclosed, potentially leaking sensitive information. The attack requires user interaction by opening a malicious ICO file, which reduces the likelihood of exploitation. There is no indication of integrity impact or remote exploitation without user interaction.

No official patch or fix is currently confirmed. The vendor advisory from Red Hat recommends not opening ICO files from untrusted sources with GIMP to mitigate this vulnerability. Users should exercise caution and avoid processing ICO images from unknown or untrusted origins until a fix is available. Monitor the vendor advisory for updates on patch availability.