medium5.0
CVE-2026-40917
A flaw was found in GIMP.
Impact
A flaw was found in GIMP. This vulnerability, a heap buffer over-read in the `icns_slurp()` function, occurs when processing specially crafted ICNS image files. An attacker could provide a malicious ICNS file, potentially leading to application crashes or information disclosure on systems that process such files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gimp | Gimp | All versions |
| Redhat | Enterprise Linux | Versions 6.0, 7.0, 8.0, 9.0 |