CVE-2026-6694Medium· 5.5▾ SunlitA flaw was found in GIMP's file-png plugin. A remote attacker can exploit this by crafting a malicious Animated Portable Network Graphics (APNG) image containing an oversized tRNS chunk. This can lead to a stack-based buffer overflow (CW…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 30.3 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.2%
A flaw was found in GIMP's file-png plugin. A remote attacker can exploit this by crafting a malicious Animated Portable Network Graphics (APNG) image containing an oversized tRNS chunk. This can lead to a stack-based buffer overflow (CWE-121), causing the file-png plugin to crash and resulting in a Denial of Service (DoS) for the user.
gimp (all versions)gimp (all versions)gimp:2.8/gimp (all versions)gimp (all versions)Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
To mitigate this issue, avoid opening or processing untrusted APNG (Animated Portable Network Graphics) image files with GIMP. Since the vulnerability is triggered by malformed APNG content, restricting interaction with such files will prevent the file-png plugin from crashing. If the plugin crashes, restarting GIMP may be necessary to restore full functionality.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-82343Medium· 6.1Gimp: heap out-of-bounds read and stack out-of-bounds access in psd loader from channel-count handling
CVE-2026-6384High· 7.3A flaw was found in gimp
CVE-2026-79902Medium· 5.5Gimp: stack vla size underflow denial of service in seattle
CVE-2026-80101Medium· 4.4Gimp: multiple heap out-of-bounds reads in xwd loader from unrelated width and bytes-per-line validation
CVE-2026-82328Medium· 6.1Gimp: heap out-of-bounds read in ico loader via unvalidated used_clrs palette count
CVE-2026-82324Medium· 6.1Gimp: heap out-of-bounds reads in iff/ilbm loader from ham row size mismatch and nplanes=0