CVE-2026-90948

Received Received - Intake

Integer Overflow Leading to Heap Buffer Overflow in GIMP ICO File Loader

Publication date: 2026-09-14

Last updated on: 2026-09-15

Assigner: redhat-SADP

Description

A flaw was found in GIMP's ICO file loader. When processing an ICO file containing an embedded PNG image, an integer overflow can occur during the calculation of the required buffer size. This leads to an undersized buffer being allocated, causing a heap-based buffer overflow when the decoded pixel data is written. A remote attacker could exploit this by crafting a malicious ICO file, which, when opened, could lead to arbitrary code execution or a crash.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-14

Last Modified

2026-09-15

Generated

2026-09-15

AI Q&A

2026-09-14

EPSS Evaluated

N/A

NVD

CVE-2026-90948

EUVD

EUVD-2026-77471

Affected Vendors & Products

Vendor	Product	Version / Range
gnome	gimp	*
gnome	gimp	to 2026-09-48 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-787	The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This vulnerability is a heap-based buffer overflow in GIMP's ICO file loader. When processing an ICO file with an embedded PNG image, an integer overflow occurs during buffer size calculation. This leads to an undersized buffer being allocated. When the PNG image is decoded and pixel data is written, it overflows the buffer, potentially causing crashes or arbitrary code execution.

Detection Guidance

This vulnerability is specific to GIMP's ICO file loader and requires manual inspection of files or system logs. Monitor for crashes when opening ICO files in GIMP. Check GIMP version and update history for affected builds. No direct network detection commands are available.

Impact Analysis

If exploited, this vulnerability could allow an attacker to execute arbitrary code or crash GIMP by tricking a user into opening a specially crafted ICO file. This could lead to system compromise, data loss, or denial of service within the context of the user running GIMP.

Compliance Impact

This vulnerability could impact compliance by potentially exposing sensitive data if arbitrary code execution occurs, leading to unauthorized access. It may violate data protection requirements under GDPR or HIPAA if user data is compromised due to the flaw in GIMP's processing of ICO files.

Mitigation Strategies

Avoid opening untrusted ICO files in GIMP. Disable GIMP's ICO file loader if possible. Monitor for GIMP updates from vendors. No official patches are currently available per Red Hat's assessment.

Hi! I’m here to help you understand CVE-2026-90948. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70