Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw was found in GIMP. An integer overflow vulnerability exists when processing ICO image files, specifically in the `ico_read_info` and `ico_read_icon` functions. This issue arises because a size calculation for image buffers can wrap around due to a 32-bit integer evaluation, allowing oversized image headers to bypass security checks. A remote attacker could exploit this by providing a specially crafted ICO file, leading to a buffer overflow and memory corruption, which may result in an application level denial of service.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
5 versions affected across 2 products
Through libFuzzer, Integer overflow when processing specially crafted ICO image files, leading to memory corruption in GIMP. https://github.com/inputzero/Security-Advisories/blob/main/CVE-2026-2272.md #infosec #fuzzing
Post summary
The advisory reports an integer overflow vulnerability in GIMP’s ICO file handling discovered via libFuzzer, resulting in memory corruption; no PoC, exploitation, or patch details are provided.
CVE-2026-2272 A flaw was found in GIMP. An integer overflow vulnerability exists when processing ICO image files, specifically in the `ico_read_info` and `ico_read_icon` functions. T… https://www.cve.org/CVERecord?id=CVE-2026-2272
Post summary
A new integer‑overflow vulnerability (CVE‑2026‑2272) was identified in GIMP’s ICO file handling routines (`ico_read_info` and `ico_read_icon`). No proof of concept, exploit, patch, or evidence of active exploitation is mentioned.
5 of 5 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | gimp | gimp | 3.0.6 | - | - |
| OS | redhat | enterprise_linux | 6.0 | - | - |
| OS | redhat | enterprise_linux | 7.0 | - | - |
| OS | redhat | enterprise_linux | 8.0 | - | - |
| OS | redhat | enterprise_linux | 9.0 | - | - |