CVE-2026-42169 Gimp: gimp apng loader heap-buffer-overflow when fctl width exceeds ihdr width (file-png.c)

High 7.3 Published 4 Aug 2026 Updated 12 Oct 2026

Attackers can execute arbitrary code by tricking users into opening specially crafted APNG or DDS image files in GIMP.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: A user has to click or open something
Fix: Available

What is CVE-2026-42169?

CVE-2026-42169 is a high-severity memory corruption vulnerability in Redhat Enterprise Linux, published on 4 Aug 2026. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.

Official description

A heap-buffer-overflow vulnerability exists in the APNG (Animated PNG) file loader of GIMP. This flaw occurs when the `fcTL` width exceeds the `IHDR` width, leading to pixel data being written past the end of a heap allocation. Additionally, a heap-based buffer overflow exists in the DDS plug-in due to a BPP mismatch in the `load_layer()` function. Both vulnerabilities can be triggered by opening a specially crafted image file, potentially leading to code execution.

Weakness: CWE-131

Which versions are affected by CVE-2026-42169?

It affects 2 products.

Products include Redhat Enterprise Linux, Redhat Enterprise Linux Eus.

How do I fix CVE-2026-42169?

Apply the vendor's patch.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2026-42169 being exploited?

There is no known exploitation of CVE-2026-42169 in the wild and no public exploit code.

All Redhat Enterprise Linux vulnerabilities

Sources

Also known as DEBIAN-CVE-2026-42169, GHSA-xq2c-w9r3-rwr6, OESA-2026-3413, OESA-2026-3414, UBUNTU-CVE-2026-42169.