Gimp: gimp: memory corruption due to integer overflow in ico file handling
Published Mar 26, 2026
6.5
MEDIUMCVSS 3.1
EPSS 0.84%
Description
A flaw was found in GIMP. An integer overflow vulnerability exists when processing ICO image files, specifically in the `ico_read_info` and `ico_read_icon` functions. This issue arises because a size calculation for image buffers can wrap around due to a 32-bit integer evaluation, allowing oversized image headers to bypass security checks. A remote attacker could exploit this by providing a specially crafted ICO file, leading to a buffer overflow and memory corruption, which may result in an application level denial of service.
Affected products
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||
|---|---|---|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 7 | affected |
| |||
| Red Hat | Red Hat Enterprise Linux 8 | affected |
| |||
| Red Hat | Red Hat Enterprise Linux 9 | affected |
|
- 3.0.6
- 6.0
- 7.0
- 8.0
- 9.0
No data.
Red Hat Enterprise Linux 6
gimp
Out of support scope
Red Hat Enterprise Linux 7
gimp
Fix deferred
Red Hat Enterprise Linux 8
gimp:2.8/gimp
Fix deferred
Red Hat Enterprise Linux 9
gimp
Fix deferred
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 6 | gimp | Out of support scope | n/a |
| Red Hat Enterprise Linux 7 | gimp | Fix deferred | n/a |
| Red Hat Enterprise Linux 8 | gimp:2.8/gimp | Fix deferred | n/a |
| Red Hat Enterprise Linux 9 | gimp | Fix deferred | n/a |
No package ranges for this CVE.
Remediation
Vendor solution
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Red Hat statement
This MODERATE impact flaw in GIMP allows a remote attacker to cause an application denial of service. The vulnerability occurs due to an integer overflow when processing specially crafted ICO image files, leading to memory corruption. User interaction is required for exploitation, as a malicious ICO file must be opened by the GIMP application.
Red Hat mitigation
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
References (6)
- https://access.redhat.com/security/cve/CVE-2026-2272 vdb-entryx_refsource_REDHATThird Party AdvisoryVendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2438428 exploitissue-trackingx_refsource_REDHATIssue TrackingThird Party Advisory
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-16341 Advisory
- https://gitlab.gnome.org/GNOME/gimp/-/issues/15617 exploitIssue Tracking
- https://nvd.nist.gov/vuln/detail/CVE-2026-2272
- https://www.cve.org/CVERecord?id=CVE-2026-2272
| Link | Providers | Tags |
|---|---|---|
| https://access.redhat.com/security/cve/CVE-2026-2272 | vdb-entryx_refsource_REDHATThird Party AdvisoryVendor Advisory | |
| https://bugzilla.redhat.com/show_bug.cgi?id=2438428 | exploitissue-trackingx_refsource_REDHATIssue TrackingThird Party Advisory | |
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-16341 | Advisory | |
| https://gitlab.gnome.org/GNOME/gimp/-/issues/15617 | exploitIssue Tracking | |
| https://nvd.nist.gov/vuln/detail/CVE-2026-2272 | ||
| https://www.cve.org/CVERecord?id=CVE-2026-2272 |
Change history (0)
No recorded changes yet.