VulnSocial

CVE-2026-42169Disclosure(redhat / enterprise_linux)

LOWCVSS 7.8 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A heap-buffer-overflow vulnerability exists in the APNG (Animated PNG) file loader of GIMP. This flaw occurs when the `fcTL` width exceeds the `IHDR` width, leading to pixel data being written past the end of a heap allocation. Additionally, a heap-based buffer overflow exists in the DDS plug-in due to a BPP mismatch in the `load_layer()` function. Both vulnerabilities can be triggered by opening a specially crafted image file, potentially leading to code execution.

redhat CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-131

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • enterprise_linux
  • enterprise_linux_eus

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • 2 total mentions across 1 day

Affected systems

Vendors
redhat
Products
enterprise_linuxenterprise_linux_eus

2 versions affected across 2 products

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-08-04: 2Technical Details · 2026-08-04: 208-04
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
Full discourse2 posts
  • VulniPulse@vulnipulse
    Disclosure

    ⚠️ HIGH CVE ALERT CVE-2026-42169 · Red Hat Enterprise Linux 9 · CVSS 7.3 Attackers could execute arbitrary code. 🔎 Full advisory: https://vulnipulse.com/advisories/linux-cve-2026-42169 #CyberSecurity #CVE #Linux #RedHatEnterpriseLinux9

    Post summary

    The post announces a high‑severity vulnerability (CVE-2026-42169) that allows arbitrary code execution on Red Hat Enterprise Linux 9, providing the CVE ID, CVSS score, and a link to the full advisory.

    1000055
    7 followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-42169 Heap Buffer Overflow Vulnerabilities in GIMP APNG and DDS Image Loaders https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-42169

    Post summary

    A new heap buffer overflow vulnerability (CVE-2026-42169) affecting GIMP's APNG and DDS image loaders has been disclosed, but no proof of concept, exploit, or patch information is provided.

    0000090
    4.1K followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
OSredhatenterprise_linux9.0--
OSredhatenterprise_linux_eus9.6--

Explore more

Back to dashboardredhat CVEsenterprise_linux vulnerabilities