CVE-2026-92183
Description
A flaw was found in GIMP. This flaw allows an attacker to achieve arbitrary code execution by tricking a user into opening a specially crafted Animated Portable Network Graphics (APNG) image. The vulnerability is caused by a stack-based buffer overflow resulting from improper validation of data length during APNG file parsing.
Statement
This vulnerability is rated as an Important severity because successful exploitation can result in arbitrary code execution within the context of the user running the application, though it requires explicit user interaction to open a malicious file rather than being remotely exploitable against a network service. In Red Hat Enterprise Linux deployments, GIMP is an optional desktop utility that is not installed or enabled by default on standard server environments. Consequently, exposure is confined to graphical workstation systems where users actively process untrusted image files.
Mitigation
1. Summary of action:
Remove the optional GIMP package on systems where graphical image editing is not required, or implement operational controls to avoid processing untrusted image files.
2. Command example:
To remove the package on Red Hat Enterprise Linux:
# dnf remove gimp
3. Caveats:
Removing the GIMP package disables graphical image editing workflows and might trigger the removal of dependent desktop utilities; review transaction dependencies prior to confirmation. In environments where the package must remain installed, enforce operational policies to prevent users from opening untrusted APNG files.
Common Vulnerability Scoring System (CVSS) Score Details
Info alert:Important note
CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).
The following CVSS metrics and score provided are preliminary and subject to review.
CVSS v3 Score Breakdown
| Red Hat | NVD | cve.org | |
|---|---|---|---|
| Base Score | 7.8 | N/A | 7.8 |
| Attack Vector | Local | N/A | Local |
| Attack Complexity | Low | N/A | Low |
| Privileges Required | None | N/A | None |
| User Interaction | Required | N/A | Required |
| Scope | Unchanged | N/A | Unchanged |
| Confidentiality | High | N/A | High |
| Integrity Impact | High | N/A | High |
| Availability Impact | High | N/A | High |
Vector
Red Hat: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
cve.org: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
