ZeroDay Findings
Sign inSign up

Findings

CVE-2026-2272

A flaw was found in GIMP.

Published Mar 26, 2026 · updated Jun 17, 2026 · gimp gimp

A flaw was found in GIMP. An integer overflow vulnerability exists when processing ICO image files, specifically in the and functions. This issue arises because a size calculation for image buffers can wrap around due to a 32-bit integer evaluation, allowing oversized image headers to bypass security checks. A remote attacker could exploit this by providing a specially crafted ICO file, leading to a buffer overflow and memory corruption, which may result in an application level denial of service.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Mar 26, 2026 · NIST NVD

    Detected

    A flaw was found in GIMP. An integer overflow vulnerability exists when processing ICO image files, specifically in the and functions. This issue arises because a size calculation for image buffers can wrap around due to a 32-bit integer evaluation, allowing oversized image headers to bypass security checks. A remote attacker could exploit this by providing a specially crafted ICO file, leading to

  2. Jun 17, 2026 · NIST NVD

    Updated

    A flaw was found in GIMP. An integer overflow vulnerability exists when processing ICO image files, specifically in the and functions. This issue arises because a size calculation for image buffers can wrap around due to a 32-bit integer evaluation, allowing oversized image headers to bypass security checks. A remote attacker could exploit this by providing a specially crafted ICO file, leading to

Affected

  • cpe gimp/gimp3.0.6
  • cpe redhat/enterprise linux6.0
  • cpe redhat/enterprise linux7.0
  • cpe redhat/enterprise linux8.0
  • cpe redhat/enterprise linux9.0

Sources

  • CVE.orgVulnerability recordCVE-2026-2272

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-2272

    A flaw was found in GIMP. An integer overflow vulnerability exists when processing ICO image files, specifically in the and functions. This issue arises because a size calculation for image buffers can wrap around due to a 32-bit integer evaluation

    nvd.nist.gov

References