ZeroDay Findings
Sign inSign up

Findings

CVE-2026-40917

A flaw was found in GIMP.

Published Apr 15, 2026 · updated Jun 17, 2026 · gimp gimp

A flaw was found in GIMP. This vulnerability, a heap buffer over-read in the function, occurs when processing specially crafted ICNS image files. An attacker could provide a malicious ICNS file, potentially leading to application crashes or information disclosure on systems that process such files.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Apr 15, 2026 · NIST NVD

    Detected

    A flaw was found in GIMP. This vulnerability, a heap buffer over-read in the function, occurs when processing specially crafted ICNS image files. An attacker could provide a malicious ICNS file, potentially leading to application crashes or information disclosure on systems that process such files.

  2. Jun 17, 2026 · NIST NVD

    Updated

    A flaw was found in GIMP. This vulnerability, a heap buffer over-read in the function, occurs when processing specially crafted ICNS image files. An attacker could provide a malicious ICNS file, potentially leading to application crashes or information disclosure on systems that process such files.

Affected

  • cpe gimp/gimpversion unspecified
  • cpe redhat/enterprise linux6.0
  • cpe redhat/enterprise linux7.0
  • cpe redhat/enterprise linux8.0
  • cpe redhat/enterprise linux9.0

Sources

  • CVE.orgVulnerability recordCVE-2026-40917

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-40917

    A flaw was found in GIMP. This vulnerability, a heap buffer over-read in the function, occurs when processing specially crafted ICNS image files. An attacker could provide a malicious ICNS file, potentially leading to application crashes or information disclosure o

    nvd.nist.gov

References