CVE-2026-6694

Summary

A flaw was found in GIMP's file-png plugin. A remote attacker can exploit this by crafting a malicious Animated Portable Network Graphics (APNG) image containing an oversized tRNS chunk. This can lead to a stack-based buffer overflow (CWE-121), causing the file-png plugin to crash and resulting in a Denial of Service (DoS) for the user.

Affected Software

Weaknesses

• CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Workarounds

To mitigate this issue, avoid opening or processing untrusted APNG (Animated Portable Network Graphics) image files with GIMP. Since the vulnerability is triggered by malformed APNG content, restricting interaction with such files will prevent the file-png plugin from crashing. If the plugin crashes, restarting GIMP may be necessary to restore full functionality.

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://access.redhat.com/security/cve/CVE-2026-6694
• https://bugzilla.redhat.com/show_bug.cgi?id=2459779

• ←Previous
• Next→