ZDI-26-713: GIMP APNG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerabilitynew
ZDI disclosed CVE-2026-92183, a stack-based buffer overflow in GIMP's APNG file parsing that enables remote code execution (CVSS 7.8).
ZDI published advisory ZDI-26-713 describing a stack-based buffer overflow in GIMP's APNG file parsing, assigned CVE-2026-92183 with a CVSS score of 7.8. Remote attackers can execute arbitrary code on affected installations, but exploitation requires user interaction such as visiting a malicious page or opening a malicious file. The advisory does not mention exploitation in the wild or patch status.
30