Threats Tagged 'cve-2026-42169'

Multiple security vulnerabilities have been identified in GIMP (GNU Image Manipulation Program) affecting Red Hat Enterprise Linux 9. These include a heap-buffer-overflow in the APNG loader when the fcTL width exceeds the IHDR width, a heap-based buffer overflow caused by an integer overflow in the file-fits plugin, and an out-of-bounds read in the file-icns plugin that may lead to information disclosure or application crash. Red Hat has issued an important security update addressing these issues in GIMP version 3.0.4-4.el9_8.9. The update is available for various architectures including x86_64, ppc64le, and aarch64. Users are advised to apply the update to mitigate these vulnerabilities.

A heap-buffer-overflow vulnerability exists in the APNG (Animated PNG) file loader of GIMP. This flaw occurs when the `fcTL` width exceeds the `IHDR` width, leading to pixel data being written past the end of a heap allocation. Additionally, a heap-based buffer overflow exists in the DDS plug-in due to a BPP mismatch in the `load_layer()` function. Both vulnerabilities can be triggered by opening a specially crafted image file, potentially leading to code execution.