CVE-2026-2272

Name of the Vulnerable Software and Affected Versions GIMP (affected versions not specified)

Description An integer overflow occurs when processing ICO image files within the ico read info() and ico read icon() functions. This happens because a 32-bit integer evaluation during image buffer size calculations can wrap around, allowing oversized image headers to bypass security checks. A remote attacker can exploit this by providing a specially crafted ICO file, leading to a buffer overflow and memory corruption, which may result in an application level denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.