CVE-2026-6694

Name of the Vulnerable Software and Affected Versions GIMP (affected versions not specified)

Description A flaw in the file-png plugin allows a remote attacker to cause a Denial of Service (DoS) by providing a specially crafted Animated Portable Network Graphics (APNG) image. The issue occurs when the image contains an oversized tRNS chunk, leading to a stack-based buffer overflow, which is a condition where a program writes more data to a buffer located on the stack than the buffer is allocated to hold, causing the plugin to crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.