Log in Start free

Vulnerability · Published Mar 26, 2026 · Assigned by redhat

CVE-2026-2272Gimp: gimp: memory corruption due to integer overflow in ico file handling

Medium 4.3

In plain English

A medium-severity integer overflow in Red Hat Enterprise Linux 6 from Red Hat. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 59% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)4.3Medium
Exploit odds (30 days)0.9%top 41.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known

Official description

A flaw was found in GIMP. An integer overflow vulnerability exists when processing ICO image files, specifically in the `ico_read_info` and `ico_read_icon` functions. This issue arises because a size calculation for image buffers can wrap around due to a 32-bit integer evaluation, allowing oversized image headers to bypass security checks. A remote attacker could exploit this by providing a specially crafted ICO file, leading to a buffer overflow and memory corruption, which may result in an application level denial of service.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12gimp2.10.34-1+deb12u8DEBIAN-CVE-2026-2272
Debian:12gimp2.10.34-1+deb12u8DSA-6139-1
Debian:13gimp3.0.4-3+deb13u6DSA-6139-1
Debian:13gimp3.0.4-3+deb13u6DEBIAN-CVE-2026-2272
Debian:14gimp3.2.0~RC2-3.2DEBIAN-CVE-2026-2272
Ubuntu:25.10gimpno fix listedUBUNTU-CVE-2026-2272
Ubuntu:26.04:LTSgimpno fix listedUBUNTU-CVE-2026-2272
Ubuntu:26.10gimpno fix listedUBUNTU-CVE-2026-2272

Affected products (as reported)

VendorProductVersions
Red Hat Red Hat Enterprise Linux 6 see references
Red Hat Red Hat Enterprise Linux 7 see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 9 see references

Weakness: CWE-190 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

References