A heap-buffer-overflow vulnerability exists in the APNG file loader of GIMP, triggered when the fcTL width exceeds the IHDR width, causing pixel data to overflow heap allocation. Additionally, a heap-based buffer overflow exists in the DDS plug-in due to a bits-per-pixel mismatch. Both can be exploited by opening crafted image files, potentially allowing code execution. This vulnerability has a CVSS score of 7.3 and is rated high severity. Red Hat has issued a security update for GIMP in Red Hat Enterprise Linux 9 to address this issue.